I understand how to configure VLSM, but I'm still confused why it would be needed if we have Network Address Translation. My understanding is that a local area network can use NAT to have a user or a large amount of users with private IP addresses, but still use a single unique public IP address for all those users. So what if 10-242 private addresses are wasted? They are free aren't they? Where does my logic fall apart?