ccnxjr wrote: » Depends on your setup. Will people on the local LAN require access to anything outside? Is your local lan using private IPs ? If users on your local lan are using private ip addresses, and require access to the public internet , there will need to be a nat mapping the inside IP's and ports to a public IP/port on your router (or gateway or whatever device actually has a public IP) This is a common setup. However, if all the nodes within your network have public IP addresses, then no NAT is required. Less common (but not unusual). The deal with NAT/PAT is that you only have one(or just a few) publicly routable IP address and it has to serve the needs of several private IP addressed nodes. It's generally the responsibility of the business /end user to have a NAT/PAT solution, as the ISP will just give you a public IP address and it's up to you to decide how to use it. Thats why for small business/homes they'll also supply a router that's already configured to automatically perform NAT/PAT for any devices connected to the "LAN" ports. If every device that requires public internet access has a publicly routable IP address , then NAT/PAT it isn't needed. Which is one of the benefits of migrating to IPv6 , substantial amounts of publicly routeable IP addresses!