NAT
Public IP Address: A public IP can be routed over Internet and is
reachable from the internet. If a resource needs to be
directly reachable from the internet, it must have a public
IP address. Depending on the type of resource, there might
be other requirements.
Private IP Address: A private IP address is the address your
network router assigns to your device. Each device within
the same network is assigned a unique private IP
address (sometimes called a private network address) —
this is how devices on the same internal network talk to
each other. Private IP addresses let devices connected to
the same network communicate with one another without
connecting to the entire internet.
Public IP address Private IP address
External (global) reach Internal (local) reach
Used for communicating outside your Used for communicating within your
private network, over the internet private network, with other devices in
your home or office
A unique numeric code never reused by A non-unique numeric code that may be
other devices reused by other devices in other private
networks
Found by Googling: "What is my IP Found via your device’s internal settings
address?"
Assigned and controlled by your internet Assigned to your specific device within a
service provider private network
Not free Free
Any number not included in the reserved 10.0.0.0 — 10.255.255.255;
private IP address range 172.16.0.0 — 172.31.255.255;
Example: 8.8.8.8. 192.168.0.0 — 192.168.255.255
Example: 10.11.12.13
NAT:
• NAT stands for Network Address Translation Protocol.
• With the help of NAT we can translate a private IP address into public IP address.
• If we want to communicate via internet so we have must have registered Public IP address
there.
• NAT can be simply defined as translation of internal IP’s to external IP addresses and vice versa.
• NAT connects two networks and translates the private (inside local) address in the internal
network into public address (inside global) before packets are forwarded to another network
• Inside local
• Inside Global
• Outside local
• Outside Global
There are two types of NAT:
• Static NAT: -
• One to One mapping i.e. every private ip is represented by a unique public IP.
• In the Static NAT, a single Private IP address is mapped with a legally Public IP address that’s mean
one-to-one mapping between local and global addresses.
• Static NAT is generally used for Web hosting.
• Dynamic NAT: -
• We will define a pool of public IP address. When a private IP comes to get natted it will use any
free IP from that pool.
• In the dynamic NAT, a Private IP address is translated into a Public IP address from a pool of public
IP addresses.
• If the IP address of the pool is not free, then the packet will be dropped as only a fixed number of
private IP addresses can be translated to public addresses.
• Dynamic NAT also called as one to one mapping.
• Port address translation (PAT) / NAT overload : It uses port numbers
along with IP address, so that a lot of private IP address can be
represented by a single public IP & hence termed as overload.
Static Natting
• NAT(config)#ip nat inside source static 192.168.1.1 200.10.10.1
• NAT(config)#ip nat inside source static 192.168.1.2 200.10.10.2
• NAT(config)#ip nat inside source static 192.168.1.3 200.10.10.3
• NAT(config)# do show ip nat translations
NAT(config)#int f0/0
NAT(config-if)#ip nat inside(Interface facing towards LAN)
NAT(config-if)#int f0/1
NAT(config-if)#ip nat outside(Interface facing towards ISP)
Dynamic Natting:
• NAT(config)#access-list 1 permit 192.168.1.0 0.0.0.255
• NAT(config)#ip nat pool ng 200.10.10.1 200.10.10.3 netmask 255.255.255.0
• NAT(config)# ip nat inside source list 1 pool ng
• NAT(config)#int f0/0
• NAT(config-if)#ip nat inside
• NAT(config-if)#int f0/1
• NAT(config-if)#ip nat outside
PAT:
• R1(config)#int f0/0
• R1(config-if)#ip nat inside
• R1(config-if)#int f0/1
• R1(config-if)#ip nat outside
R1(config)#access-list 1 permit 192.168.1.0 0.0.0.255
• R1(config)#ip nat pool ng 200.10.10.1 200.10.10.1 netmask 255.255.255.255
• R1(config)# ip nat inside source list 1 pool ng overload
When we require a NATTING
• When we want to connect to Internet & we have a public IP.
• When we want to connect two intranets with duplicate IP address.
• When we want to change our ISP which requires to change our
internal addressing scheme.
• When we want to hide our internal addressing scheme.
