Re: Basic NAT question
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.security.firewalls archive

Re: Basic NAT question

From: Jerry Gardner <jg2@gardnerclan.net>
Date: Fri Dec 16 2005 - 17:59:20 CET

> Is it possible to configure NAT as static many-to-one where the "many"
> side is always the same and so is the "one" address? If so how often is
> type of NAT used?

Sure. Anyone who uses private, static addresses does this. I do on my
network. On the private side of the firewall the computers are
assigned a static IP from 192.168.1.x and they all are NATed to my
single public static IP address on the other side of the firewall.

> I also have the same question when it comes to dynamic NAT?

This is also quite common. Many people use DHCP to assign a dynamic
private address to their systems and then NAT them to either a single
address on the public-facing side of the firewall, or to a range of
addresses (this is called a "DIP" in the Netscreen world).

-- 
Jerry Gardner
jg2-usenet@gardnerclan.net
Received on Fri Dec 23 20:08:06 2005