
Configuring Network Address Translation
303528-A Rev 00
12-25
Configuring N-to-1 Address Translation
N-to-1 address translation -- also known as dynamic port translation -- allows you
to translate a range of local IP addresses on a private network into a single global
IP address.
N-to-1 translation is valid only for TCP/UDP packets. All non-TCP/UDP packets
with addresses that fall within the N-to-1 range are dropped.
With N-to-1 address translation enabled, you define a range of local addresses for
N-to-1 translation and specify a single N-to-1 global address. When NAT receives
a packet on the local interface, the following events occur:
1. NAT determines that the local source address falls within an N-to-1 range.
2. NAT assigns the N-to-1 global source address and a unique port number to the
packet.
3. NAT transmits the packet on the global interface.
In Figure 12-5
, for example, the network administrator has set up an N-to-1 local
address range of 55.0.0.0 to 55.255.255.255 and associated this range of local
addresses with global IP address 192.1.1.1. The following events occur:
1. NAT receives a packet from host A on the local interface with a local source
address of 55.0.0.1 and a port number of 2001.
2. Determining that the local source address falls within an N-to-1 range, NAT
stores the port number, replaces the local source address with the global
address 192.1.1.1, assigns a new unique port number X12Y, and transmits the
packet on the global interface.
3. Subsequently NAT receives a packet from host B on the local interface with
local source address 55.0.0.2 and port number 2222. Determining that this
local source address falls in the same N-to-1 range, NAT replaces the local
source address with the global address 192.1.1.1, assigns unique port number
X54Y, and transmits the packet on the global interface.
Comentários a estes Manuais