David_P wrote: »
If I understanding you guys correctly, NAT just changes a private IP to a public IP to get out onto the internet, a one-one relationship, right? And PAT takes all my devices on my private network and changes it to a single public address to get out onto the internet? A many to one relationship?
David_P wrote: »
I just found an example that makes sense to me about DNAT:
When the traffic hit the firewall, DNAT would change the destination IP address and port to 192.168.1.100 and port 80, and the packet would be rerouted to the web server.
f0rgiv3n wrote: »
Check which DNAT you're referring to. DNAT as I described is "Destination NAT" which is different than what instant000 described which is "Dynamic NAT".
instant000 wrote: »
NAT - network address translation
DNAT - dynamic network address translation
PAT - port address translation (also called NAT overload)
static NAT - static network address translation
NAT - is network address translation.
NAT is basically a translation from one network address, to another one.
static NAT - means that the address ALWAYS translates to the same address, every single time
dynamic NAT - means that the address may translate to one of several addresses, it doesn't necessarily have a one-to-one correspondence, like the static NAT. dynamic NAT is used with a pool of addresses that addresses could be translated to
PAT - means that the translation is to a address/port combination, such that one address can "overload" the NAT.
that is, one address can translate to 10.10.10.1:50000 and another address can translate to 10.10.10.1:40000, for example.
The form of NAT most familiar to you would probably be PAT, as your home internet connection uses a PAT so that multiple devices inside your home network connect out through a single global address. Each of your internal devices translates to a different address/port combination.
About the only way this can make more sense, is if you configure it
Hope this helps!
EDIT: I may have made an example of this before somewhere. If I can find it, I'll try to post it here. (No need to reinvent the wheel.)