Scribd Logo
Upload

Welcome to Scribd!

  • HC110110026 Network Address Translation

    Uploaded by

    Mohamed Elsadany
    4 views20 pages
    Network Address Translation (NAT) allows private IP addresses to be used on a private network while providing access to public networks. There are several common NAT methods that map private IP addresses and port numbers to public IP addresses and port numbers to conserve public address space. These include static NAT for one-to-one mapping, dynamic NAT for mapping multiple private addresses to public pool addresses, and Network Address Port Translation (NAPT) which uses port numbers to map multiple endpoints. Configuration of NAT involves defining address translation rules between inside private networks and outside public networks.

    Original Description:

    Copyright

    © © All Rights Reserved

    Available Formats

    PPTX, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    Network Address Translation (NAT) allows private IP addresses to be used on a private network while providing access to public networks. There are several common NAT methods that map private IP addresses and port numbers to public IP addresses and port numbers to conserve public address space. These include static NAT for one-to-one mapping, dynamic NAT for mapping multiple private addresses to public pool addresses, and Network Address Port Translation (NAPT) which uses port numbers to map multiple endpoints. Configuration of NAT involves defining address translation rules between inside private networks and outside public networks.

    Copyright:

    © All Rights Reserved
    Download as PPTX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    4 views20 pages

    HC110110026 Network Address Translation

    Uploaded by

    Mohamed Elsadany
    Network Address Translation (NAT) allows private IP addresses to be used on a private network while providing access to public networks. There are several common NAT methods that map private IP addresses and port numbers to public IP addresses and port numbers to conserve public address space. These include static NAT for one-to-one mapping, dynamic NAT for mapping multiple private addresses to public pool addresses, and Network Address Port Translation (NAPT) which uses port numbers to map multiple endpoints. Configuration of NAT involves defining address translation rules between inside private networks and outside public networks.

    Copyright:

    © All Rights Reserved
    Download as PPTX, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 20

    Network Address Translation

    Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.


    Foreword
     The continued growth of IP networks in general has resulted in an ever increasing
    pressure on the IPv4 address space, and the need for a way to prolong the
    depletion until long term solutions are founded. Network Address Translation has
    become well established as the existing solution and widely implemented within
    enterprise networks. Many variations of NAT have been developed thus conserving
    the public address space whilst enabling continued public network
    communication. This section introduces the concept of NAT along with examples
    of common NAT methods applied, for maintaining internetworking between the
    enterprise network and the public network domain.

    age 2 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    Objectives
     Upon completion of this section, you will be able to:
     List some of the different forms of Network Address Translation.
     Explain the general behavior of NAT.
     Configure NAT to suit application requirements.

    age 3 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    Private & Public Networks

    192.168.1.1/24
    Private Public

    SWA 200.10.10.0/30

    SWA

    192.168.1.2/24

     A measure taken against rapid depletion of IP addresses.


     Gateway operates as a private/public address boundary.

    age 4 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    NAT Behavior

    Inside Global
    192.168.1.1/24

    SWA

    SWA

    192.168.1.2/24

     NAT boundaries are represented as either inside or global.


     Translation of addresses is performed between boundaries.

    age 5 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    Static NAT

    S:192.168.1.1 D:1.1.1.1 S:200.10.10.5 D:1.1.1.1


    .1

    Host A SWA 1.1.1.1/24


    RTA
    (200.10.10.5)
    200.10.10.1/24
    192.168.1.0/24 SWA

    .2

    D:192.168.1.1 S:1.1.1.1 D:200.10.10.5 S:1.1.1.1


    Host B

     One-to-one mapping of private to public addresses.


     Limits the need for address management with session flows.

    age 6 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    Dynamic NAT

    S:192.168.1.1 D:1.1.1.1 S:200.10.10.11 D:1.1.1.1

    .1 S:192.168.1.2 D:1.1.1.1 S:200.10.10.12 D:1.1.1.1

    Host A SWA 1.1.1.1/24


    RTA
    200.10.10.1/24
    192.168.1.0/24 SWA

    .2
    Address
    AddressGroup
    Group
    200.10.10.11
    200.10.10.11
    200.10.10.12
    200.10.10.12
    Host B
    192.168.1.0/24 200.10.10.0/24
    192.168.1.1 200.10.10.11
    192.168.1.2 200.10.10.12
     Private address mapping based on an address resource pool.
     Allows users to utilize public addresses based on need.

    age 7 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    Network Address Port Translation

    S:192.168.1.1:1025 S:200.10.10.11:2843

    .1 S:192.168.1.2:1028 S:200.10.10.11:2844

    Host A 1.1.1.1/24
    SWA RTA
    200.10.10.1/24
    192.168.1.0/24 SWA
    G0/0/1
    .2
    Address
    AddressGroup
    Group
    200.10.10.11
    200.10.10.11
    200.10.10.12
    200.10.10.12
    Host B

    192.168.1.0/24 200.10.10.0/24
    192.168.1.1:1025 200.10.10.11:2843

    192.168.1.2:1028 200.10.10.11:2844
    ……
    ……
     Port numbers distinguish mapping of the same public address.

    age 8 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    Easy IP

    S:192.168.1.1:1025 S:200.10.10.1:2843

    .1 S:192.168.1.2:1028 S:200.10.10.1:2844

    Host A SWA 1.1.1.1/24


    RTA
    200.10.10.1/30
    192.168.1.0/24 SWA
    G0/0/1 S1/0/0
    .2

    192.168.1.0/24 200.10.10.1/30
    Host B
    192.168.1.1:1025 200.10.10.1:2843

    192.168.1.2:1028 200.10.10.1:2844

    …… ……

     The WAN interface address used as a single public address for all internal
    users, with port numbers used to distinguish sessions.

    age 9 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    NAT Internal Server

    D:192.168.1.1:8080 D:200.10.10.5:80

    Server 1.1.1.1/24
    RTA
    192.168.1.1/24 200.10.10.1/30

    S1/0/0

     External sources can reach internal addresses.


     Mapping of both the IP address and port number is performed.

    age 10 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    Static NAT Configuration

    .1 S:192.168.1.1 D:1.1.1.1 S:200.10.10.5 D:1.1.1.1

    Host A 1.1.1.1/24
    SWA RTA

    192.168.1.0/24
    G0/0/1 S1/0/0
    .2

    Host B

    [RTA]interface GigabitEthernet0/0/1
    [RTA-GigabitEthernet0/0/1]ip address 192.168.1.254 24
    [RTA]interface Serial1/0/0
    [RTA-Serial1/0/0]ip address 200.10.10.1 24
    [RTA]nat static global 200.10.10.5 inside 192.168.1.1

    age 11 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    Static NAT Configuration Validation

    [RTA]display nat static


    Static Nat Information:
    Interface : Serial1/0/0
    Global IP/Port : 200.10.10.5/----
    Inside IP/Port : 192.168.1.1/----
    Protocol : ----
    VPN instance-name : ----
    Acl number : ----
    Netmask : 255.255.255.255
    Description : ----

    Total : 1

     Static inside and global address translation can be verified.

    age 12 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    Dynamic NAT Configuration
    192.168.1.1 200.10.10.11
    192.168.1.2 200.10.10.12
    .1
    …… ……

    Host A 1.1.1.1/24
    SWA RTA

    192.168.1.0/24
    G0/0/1 S1/0/0
    .2

    Host B

    [RTA]nat address-group 1 200.10.10.11 200.10.10.16


    [RTA]acl 2000
    [RTA-acl-basic-2000]rule 5 permit source 192.168.1.0 0.0.0.255
    [RTA-acl-basic-2000]quit
    [RTA]interface serial1/0/0
    [RTA-Serial1/0/0]nat outbound 2000 address-group 1 no-pat

    age 13 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    Dynamic NAT Configuration Validation
    [RTA]display nat address-group 1
    NAT Address-Group Information:
    --------------------------------------
    Index Start-address End-address
    1 200.10.10.11 200.10.10.16
    [RTA]display nat outbound
    NAT Outbound Information:
    ----------------------------------------------------------------
    Interface Acl Address-group/IP/Interface Type
    ----------------------------------------------------------------
    Serial1/0/0 2000 1 no-pat
    ----------------------------------------------------------------
    Total : 1
     Enables group binding parameter configuration to be verified.

    age 14 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    Easy IP Configuration

    S:192.168.1.1:1025 S:200.10.10.1:2843

    .1
    S:192.168.1.2:1028 S:200.10.10.1:2844

    Host A 1.1.1.1/24
    SWA RTA

    192.168.1.0/24 RTA 200.10.10.1


    SWA
    G0/0/1 S1/0/0
    .2

    Host B

    [RTA]acl 2000
    [RTA-acl-basic-2000]rule 5 permit source 192.168.1.0 0.0.0.255
    [RTA-acl-basic-2000]quit
    [RTA]interface serial1/0/0
    [RTA-Serial1/0/0]nat outbound 2000

    age 15 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    Easy IP Configuration Validation

    [RTA] display nat outbound


    NAT Outbound Information:
    ---------------------------------------------------------------------
    Interface Acl Address-group/IP/Interface Type
    ---------------------------------------------------------------------
    Serial1/0/0 2000 200.10.10.1 easyip
    ---------------------------------------------------------------------
    Total : 1

     Associated outbound interface parameters are displayed.


     The type field verifies the successful configuration of Easy IP.

    age 16 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    NAT Internal Server Configuration

    D:192.168.1.1:8080 D:200.10.10.5:80

    Server
    RTA
    200.10.10.1

    192.168.1.1/24 G0/0/1 S1/0/0

    [RTA]interface GigabitEthernet0/0/1
    [RTA-GigabitEthernet0/0/1]ip address 192.168.1.254 24
    [RTA]interface Serial1/0/0
    [RTA-Serial1/0/0]ip address 200.10.10.1 24
    [RTA]nat server protocol tcp global 200.10.10.5 www inside
    192.168.1.1 8080

    age 17 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    NAT Internal Server Configuration Validation

    [RTA]display nat server


    Nat Server Information:
    Interface : Serial1/0/0
    Global IP/Port : 200.10.10.5/80(www)
    Inside IP/Port : 192.168.1.1/8080
    Protocol : 6(tcp)
    VPN instance-name : ----
    Acl number : ----
    Description : ----

    Total : 1

     Successful translation of the IP address and port is achieved.

    age 18 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    Summary
     Which form of translation will allow a server in a DMZ to be accessed from both
    an external and an internal network?
     What is the function of the PAT feature?

    age 19 Copyright © 2019 Huawei Technologies Co., Ltd. All rights reserved.
    Thank You
    www.huawei.com

    You might also like