Questions tagged [nat]
For questions about Network Address Translation (NAT), a method of modifying network address information in IPv4 packet headers.
40
questions
72
votes
5
answers
21k
views
Why are IPv4 addresses running out?
I understand that we are running out (or ran out already?) of IPv4 addresses, but I don't really understand why that is. Right now, every home has its own IPv4 address (dynamically assigned, but still,...
- 831
7
votes
2
answers
2k
views
NAT Overlapping
I am trying to do some networking lab. Basically, I have a network like this:
So, is it possible to configure NAT router in such way, that PC1 and PC2 can access remote HOST and each other. The ...
- 173
19
votes
2
answers
9k
views
How does the router know how to route the packets to my terminal?
Suppose I have a network of 2 computers, each having a private network address of 192.168.1.101 and 192.106.1.102.
For my public ip address, it is 10.2.10.172.
When I make a http request to google....
- 301
13
votes
2
answers
5k
views
How NAT / PortForwarding / TCP/IP works?
I recently read an article entitled how NAT works. Some things still remain unclear to me. I would be thankful if someone could explain.
Below is the part of the article regarding DynamicNAT that is ...
- 233
10
votes
2
answers
3k
views
What do these three options in a Cisco Router NAT configuration mean?
In a standard Static PAT configuration, where one IP:Port combination is always mapped to another IP:Port combination, there are three possible combinations of inside/outside/source/destination that ...
- 14.5k
8
votes
1
answer
2k
views
UDP hole punching NAT port
I just read an article about the process of "punching holes" with the UDP protocol. I understand how it's done, but I have one last question to clear up things. We have the rendezvous server and ...
3
votes
1
answer
1k
views
How does a router know to which PC in a network to send a response from a server?
When my PC sends a request to a server, the transmitted IP address is the one of my private network. When the server responds to the request, how does the router know to which PC in the network to ...
- 135
2
votes
3
answers
1k
views
Why can't a host B act as a server, and accept TCP connections, when sitting behind a NAT?
Originally, I thought I intuitively understood why B can't accept TCP connections, however when I read about how P2P applications circumvent this exact problem by using an intermediate peer that is ...
- 123
13
votes
2
answers
30k
views
Open a range of TCP ports in Cisco IOS NAT
ip nat inside source static 192.168.1.10 10.10.10.9 route-map RANGE
!
route-map RANGE permit 100
match ip address 102
!
access-list 102 permit tcp host 192.168.1.10 range 3000 3389 any
The ...
- 131
10
votes
2
answers
12k
views
why STUN doesn't work with symmetric NAT?
I read this line from wikipedia.
"STUN does work with three types of NAT: full cone NAT, restricted
cone NAT, and port restricted cone NAT. In the cases of restricted
cone or port restricted ...
- 235
10
votes
1
answer
4k
views
How does NAT share one public IPv4 address across multiple private IPv4 addresses [closed]
I think it's a very classical question, but, thought I've have some background, I don't have enough vocabulary anymore to search and understand correctly in the Web.
Let's say I have a home network ...
- 203
9
votes
7
answers
17k
views
What is the purpose of subnetting, if we have NAT?
As I know, NAT is the system, that divides IP addresses into two categories - public and private. Public represents the local network from the outside and private represents the device from the inside....
- 93
7
votes
3
answers
5k
views
How does NAT decide which connections are inbound, and which are outbound?
I'm building a P2P application that needs to be able to access nodes behind a NAT. This NAT does not allow inbound connections, therefore the nodes outside the network cannot reach out to the nodes ...
- 73
7
votes
5
answers
11k
views
Why does NAT translate a source port?
I’m beginning to learn about nat and I was wondering why does NAT translate a source port? Doesn’t a port represent an application that’s requesting a service? So why must it be translated? Also what ...
- 71
7
votes
2
answers
3k
views
IPv6 and online privacy and security
I am studying up on IPv6 and part of the talk was about how the machines generate or can have multiple IPv6 addresses for internal use and external use.
Does this mean that there is no longer a "...
- 1,015
6
votes
1
answer
3k
views
Cisco 867 forward UDP port range
I need to forward an UDP port range to a specific private IP address in my LAN.
In order to forward one port to an internal IP I do:
access-list <acc_list_number> permit <port_type> any ...
- 206
3
votes
3
answers
6k
views
At which layer does router operate?
I have studied from various sources that router is a layer 3 device. It does routing based on Network layer (layer 3) header, but I have a doubt.
Network address translation (NAT) is a feature of ...
- 345
3
votes
2
answers
7k
views
How is harpinning (NAT loopback) used in practice?
I have never had to use hairpinning in the past and so far, reading its description on Wikipedia, I don't see many use cases for this technology, apart from some requests from selected users inside ...
- 339
2
votes
2
answers
514
views
CGN and its advantages
I have been reading about CGN. Though similar to NAT it is used by service providers to route traffic without the need for the a public IP address.
But when the packet leaves the ISP to the public ...
- 1,237
21
votes
3
answers
4k
views
CEF operations on L3 switch vs router
I understand that L3 switches use CEF for faster packet forwarding. However, CEF will not work for packets that need to undergo NAT. Does this mean CEF isn't used by edge routers and edge L3 switches? ...
- 1,005
13
votes
4
answers
35k
views
What layer of the OSI model does NAT work?
Simple question and the answer is layer 3 of course, but can we say that PAT is working on layer 4 also because it deals with port numbers which is a layer 4 function?
Or is it only a layer 3 ...
- 133
10
votes
2
answers
11k
views
How `UDP Hole Punching` Works?
Can anyone explain how UDP hole punching works in a simple way? I know how NAT and PAT works, but can't get a clear idea about UDP hole punching.
- 603
9
votes
2
answers
9k
views
pfSense multi-wan Bridge, NAT, Load balancing and CARP
Context
I currently have :
1 pfSense 2.0.2 router (on a Firebox X-Peak X5000)
2 WAN
1 LAN
3 Servers
My interfaces
WAN1 68.XX.XXX.98 to 69.XX.XXX.102
WAN2 65.XXX.XXX.58 to 66.XXX.XXX.62
LAN 192.168....
- 337
9
votes
3
answers
5k
views
Cisco NAT hairpinning
I have a Cisco router configured NAT (4 static NAT and dynamic NAT). My problem is that I can't access internal servers using public IP addresses from the internal network.
I know what the problem ...
- 253
9
votes
1
answer
2k
views
NAT VLANs with same IP Subnets
I have a VMware environment in which VMs are running a simulation suite. The software used has hardcoded IP addresses, about 10-15 VMs, and we are running multiple instances of this software each in ...
- 93
7
votes
2
answers
2k
views
PPPoE with NAT configuration broken
We are trying to replace our existing router with a newly purchased
Cisco router:
GigabitEthernet0/0: PPPoE
GigabitEthernet0/1: 192.168.2.1
The PPPoE is getting established perfectly, and I can ping
...
- 431
7
votes
1
answer
3k
views
Problem with VPN tunel from remote location through ISP (PPTP)
I have network situation like this:
ISP Router (modem) - device given to us by our ISP - modem & router in one but it is set into transparent mode - ISP say so ;D we have to find it that it is ...
- 439
6
votes
3
answers
3k
views
How is NAT a hack?
Forgive me if this sounds a little amateurish, or if this is the wrong stackexchange, but...most of my entirely life I've had ipv4 behind a NAT router. I've been told that this was a hack; simply ...
- 321
4
votes
3
answers
2k
views
How does a router a layer 3 device translate port address in PAT, as it is a layer 3 device?
While I was reading about PAT i.e Port Address Translation.The router was configured to translate all the private IP addresses to one single public IP.Since router is a layer-3 device, it can do that ...
4
votes
4
answers
759
views
Is there a valid scenario where a router is used to translate a public IP address?
NAT typically refers to router translating an IP address from a private network to a public IP address so that the node on the private network can access public Internet.
Is there a valid scenario ...
- 143
4
votes
1
answer
1k
views
CISCO Port Forwarding Going to Wrong Machine
We are running a few services in our internal network that we would like
to expose to the outside world. At first we were having trouble with email,
dns, and www. Not sure what happened but email and ...
- 431
4
votes
1
answer
260
views
How are IPv4 Addresses provided uniquely to domains?
this question has been bothering me for sometime and I've yet to receive a clear answer (it bothers me whenever I go to sleep). I would like to receive expert answers on this matter.
Who mainly ...
- 43
3
votes
2
answers
2k
views
where to NAT?where to run BGP?
in this diagram :
we are peering with 2 ISPs, let's say I have a class c IP space like 200.200.200.0/24 and let's say my ASN is 65000, the thing is where should I run NAT? on which device? I mean on ...
- 425
3
votes
3
answers
5k
views
IPv6 NAT with Link-Local Address
It's more than usual to find NAT translating IPv4 private addresses (such as 192.168.0.0/16 or 10.0.0.0/8) to non private addresses.
Is it possible that NAT translates even IPv6 link-local addresses (...
2
votes
4
answers
197
views
Does a Business Router from an ISP perform actual routing or only Network Address Translation (NAT)?
Let's say that the professional business router is connected to the Internet through the WAN port and has some devices in the office connected through the other ports.
The devices in the office ...
- 1,491
2
votes
2
answers
1k
views
Private and Public IPs in the same OSPF area
I will have a routed network with both public and private subnets routed with OSPF. There will be two core routers that both have a default route to the internet.
My question is how I make sure that ...
- 406
2
votes
1
answer
2k
views
Port-forwarding rule on Cisco ASA not working - "Drop-reason: (acl-drop) Flow is denied by configured rule"
New to Cisco, so I hope this question isn't too noobish. I am trying to setup a port-forwarding rule to allow "any" SSL traffic in from "Outside" to the web server on my LAN. The problem is apparently ...
- 145
1
vote
1
answer
79
views
How to Mitigate DoS by Bindings/Transport Address Exhaustion in NAT64?
Let's say a NAT64 Router only has 1 IPv4 address for bindings, meaning the NAT64 router has a roughly 65535 IPv4 transport addresses. A malicious attacker can then exhaust the entire IPv4 transport ...
- 27
1
vote
1
answer
148
views
Unsecured devices and IPv6
I'm currently starting to read up on IPv6, and as soon as I heared that every device can/will have a public accessible adreess i got a little freaked out.
There are a lot of horror stories about ...
- 113
0
votes
3
answers
115
views
Do NAT devices need to have private IP addresses?
If a NAT's job is to create mappings between internal ip/port pairs and external ip/port pairs with one Internet-routable IP address, does a NAT need a private IP address for itself? I think one ...
- 105