1

I have two private IP addresses, want to make them NAT to 203.0.113.0/2 public IP address.

WAY 1 : Static NAT (2 ip addresses NATted to one by manually)

WAY 2 : PAT (Router gives port number for each device randomly)

Question is that : Why doesn't router apply the same things on Static NATting?

  • 1
    "want to make them NAT to 10.10.10.1 public IP address." Actually 10.10.10.1 is not a public IP address, it is in the 10.0.0.0/8 Private IPv4 address block. – Ron Maupin Jun 5 at 21:55
  • Hello mr Ron Maupin. I ' ve just put example to understand the main background of the procedure. – CoderBoy Jun 5 at 21:56
  • Then you should use an address from one of the three address blocks IANA has set aside for that: 192.0.2.0/24, 198.51.100.0/24, and 203.0.113.0/24. That way people know you are giving an example, not that you are completely confused about public/private addressing. – Ron Maupin Jun 5 at 22:00
  • I want to understand that why router doesnt give different port number on static routing if it must be applied. – CoderBoy Jun 5 at 22:00
  • 1
    Basic NAT only translates the network addresses, while NAPT (what Cisco calls PAT) also translates the transport protocols address (port) for TCP and UDP, and the Query ID for ICMP. RFC 2663, IP Network Address Translator (NAT) Terminology and Considerations and RFC 3022, Traditional IP Network Address Translator (Traditional NAT) go into more detail, but it would help if we had a specific router model because different routers do it differently. – Ron Maupin Jun 5 at 22:14
3

PAT is used to translate multiple private IP addresses to a single public IP address. PAT is used for internet connectivity mostly..

Static NAT is used to translate a single private IP address with a single public IP address. When application is hosted in the internal network wants to access application from internet static NATting is used. It's one to one NATting ...

PAT is many to one natting pat is also called NAT overload..

| improve this answer | |
2

The router (or ASA) giving different ports for a Dynamic PAT is what allow multiple hosts to share a single public IP address at the same time.

This answer will explain why a Dynamic PAT must change the Port number.

Either way, the ASA will allow you to configure two Static NAT's, but keep in mind the translation will only apply in the outbound direction. On the inbound direction, only one Static NAT will apply.

Meaning if you have two Internal hosts: 10.0.0.11 and 10.0.0.22, and you configure two Static NATs:

object network HOST1
  host 10.0.0.11
  nat (inside,outside) static 72.9.9.33

object network HOST2
  host 10.0.0.22
  nat (inside,outside) static 72.9.9.33

When either host makes a outbound request, their traffic will be translated to 72.9.9.33. BUT, if anyone external initiates a request to 72.9.9.33, it will only be translated to Host1's IP address.

So it isn't a true Static NAT. It's a true Static NAT for the first host (inbound and outbound), and a psuedo Static NAT for the second host (outbound only).

If you only need specific ports to access the internal servers, you're better off configuring a Static PAT.

| improve this answer | |
2

Port adress translation is for outbound traffic

Static nat is for inbound traffic..

| improve this answer | |
  • Looks like you double posted your answer, and this version is a draft? You could delete it and keep the other one – auspicious99 Jul 6 at 7:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.