nowadays most of the LAN networks use NAT to link all the computers to the internet using only one External IP address. what if have only one computer and i want it to use that external ip address directly on it's interface without using NAT, PAT and PortForwarding as it's nowadays done for global IPV6 adddresses ??? how it can be technically done ??? is there additional devices that should be present to implement this solution or should the router be replaced by another equipment ???
3
-
2It is very simple to connect to the internet without nat... put a firewall like a Cisco ASA in transparent mode and connect to the upstream ISP's CPE. Technically you don't need a firewall, but no person in their right mind should connect a PC directly to the internet without knowing what they're doing and all the associated risks.– Mike PenningtonCommented Mar 30, 2014 at 1:55
-
@MikePennington the firewall could do the filtering with policies, without doing NAT. For example: you have a public IP configured in the LAN. The firewall has the routing and filtering task, but not the NATting.– BulkiCommented Mar 31, 2014 at 10:31
-
@Bulki, I gave him a generic answer that works for many situations... of course, you could implement Topology C that was suggested below... that's basically what you're saying. I never said that my answer was the only answer :-)– Mike PenningtonCommented Mar 31, 2014 at 10:39
Add a comment
|
1 Answer
IPv4 or IPv6 doesn't matter, except for the availability of addresses. These are examples using IPv4.
Topology A is what most people do. Topology B is what Mike Pennington said. Topology C is what you can do if you get a few addresses from your ISP.
-
Note that for IPv6 toplogy "C" is the norm since IPv6 addresses are not in short supply and IPv6 proponents see NAT as highly undesirable. Commented Jan 5, 2017 at 14:17