Network Address Translation (NAT)
Uploaded by
phanisrinivassabnaveesuNetwork Address Translation (NAT)
Uploaded by
phanisrinivassabnaveesuNETWORK ADDRESS
TRANSLATION (NAT)
Understanding How Private Networks Connect to the Internet
BY
PATTABHISAIRAM KHANDAVILLI
What is NAT?
NAT stands for Network Address Translation
It is a method used by routers to translate
private IP addresses into a public IP address.
Enables multiple devices on a local network to access
the internet using a single public IP.
It conserves IPv4 addresses and adds a security layer by masking internal IPs. NAT replaces source IP
addresses to communicate externally while preserving private network structure.
Why is NAT Important?
Conserves IPv4 addresses.
Adds a layer of security – hides internal IP addresses.
Allows many devices in a private network to share
one public IP.
Private vs Public IP Addresses
Private IPs: Used within internal networks (e.g., 192.168.x.x, 10.x.x.x)
Public IPs: Routable on the internet
NAT acts as a bridge between private and public IPs
HOW NAT WORKS
A DEVICE INSIDE THE PRIVATE NETWORK SENDS A REQUEST TO AN EXTERNAL SERVER ON THE INTERNET.
THE ROUTER INTERCEPTS THE PACKET AND REPLACES THE SOURCE IP ADDRESS (PRIVATE IP) WITH ITS OWN PUBLIC IP
ADDRESS.
THE ROUTER RECORDS THIS CHANGE IN A NAT TRANSLATION TABLE, NOTING THE PRIVATE IP AND PORT NUMBER
THE PACKET IS FORWARDED TO THE INTERNET WITH THE PUBLIC IP.
WHEN THE SERVER REPLIES, THE ROUTER CHECKS THE NAT TABLE AND REPLACES THE PUBLIC IP BACK WITH
THE CORRECT PRIVATE IP AND PORT
THE PACKET IS DELIVERED TO THE ORIGINAL DEVICE INSIDE THE NETWORK.
HOW NAT WORKS
(ILLUSTRATION)
SOURCE: DEVICE SENDS PACKET WITH SOURCE IP 192.168.1.10 TO 93.184.216.34 (E.G., A WEB SERVER
ROUTER: CHANGES SOURCE IP TO ITS PUBLIC IP 203.31.220.134AND ASSIGNS A UNIQUE PORT (E.G.,
45678).
INTERNET: WEB SERVER SEES REQUEST FROM 203.0.113.5:45678 AND SENDS A RESPONSE.
ROUTER: MATCHES INCOMING RESPONSE TO THE NAT TABLE, TRANSLATES BACK TO 192.168.1.10, AN
FORWARDS THE PACKET
RESULT: THE INTERNAL DEVICE COMMUNICATES SUCCESSFULLY THROUGH NAT.
REAL-LIFE ANALOGY
NAT IS LIKE A RECEPTIONIST AT AN OFFICE:
PEOPLE INSIDE (DEVICES) SEND LETTERS.
RECEPTIONIST USES THE COMPANY’S SINGLE ADDRESS (PUBLIC IP).
WHEN REPLIES COME, THE RECEPTIONIST DELIVERS THEM TO THE CORRECT EMPLOYEE.
Types of NAT: Static NAT
One-to-One Mapping
Maps each private IP to a unique public IP address.
USE CASES
IDEAL FOR HOSTING SERVERS REQUIRING CONSISTENT PUBLIC ADDRESSES
CONFIGURATION
TYPES OF NAT: DYNAMIC NAT
MANY-TO-FEW MAPPING
MAPS MULTIPLE PRIVATE IPS TO A POOL OF PUBLIC IPS
DYNAMICALLY.
USE CASES
PROVIDES CONTROLLED INTERNET ACCESS FOR INTERNAL USERS.
CONFIGURATION
ACCESS-LIST DEFINES INTERNAL IPS; POOL DEFINES PUBLIC IPS.
PORT ADDRESS TRANSLATION (PAT) / NAT OVERLOAD
MANY-TO-ONE MAPPING
MULTIPLE PRIVATE IPS SHARE ONE PUBLIC IP USING
UNIQUE PORTS.
COMMON USAGE
WIDELY USED IN HOME ROUTERS AND SMALL OFFICES.
CONFIGURATION
EXAMPLE: IP NAT INSIDE SOURCE LIST 1 INTERFACE GIGABITETHERNET0/1 OVERLOAD
NAT TRAVERSAL ISSUES
CHALLENGE
NAT BLOCKS EXTERNAL HOSTS FROM IINITATIING CONNECTIONS
PORT FORWARDING
MANUALLY ALLOWS ACCESS TO SPECIIC INTERET PORTS
TRAVERSAL TECHNIQUES
STUN, TURN, AND ICE ENABLE CONNECTION SEUP THROUGH NAT
UPNP
DEVICES CAN AUTO-CONFIGURE PORT FORWARDING, BUT WITH RISKS.
NAT AND SECURITY CONSIDERATIONS
SECURITY ROLE
NAT HIDES INTERNAL STRUCTURE FROM EXTERNAL THREATS.
LIMITATIONS
NOT A SUBSTITUTE FOR A FULL FIREWALL SOLUTION.
VULNERABILITIES
UPNP AND POOR PORT FORWARDING CAN EXPOSE RISKS.
BEST PRACTICE
USE NAT ALONGSIDE FIREWALLS AND AUDIT RULES REGULARLY.
ADVANTAGES OF NAT
CONSERVES GLOBAL IP ADDRESSES
ADDS PRIVACY BY MASKING INTERNAL IPS
ENABLES INTERNAL NETWORK EXPANSION
DISADVANTAGES OF NAT
BREAKS END-TO-END CONNECTIVITY
MAY CAUSE PROBLEMS WITH SOME APPLICATIONS (VOIP, P2P)
ADDS COMPLEXITY TO NETWORK TROUBLESHOOTING
CONCLUSION
NAT’S IMPORTANCE
ESSENTIAL FOR CONSERVING IPV4 ADDRESSES AND SECURITY.
VARIIETY OF TYPES
STATIC,DYNAMIC , PAT SERVERS DISTINCT NETWORK NEEDS
TRAVERSAL AND SECURITY
UNDERSTANDING CHALLENGES AND RISKS IS VITAL FOR ADMINS
IPV6
IPV6 WILL EVENTUALLY REMOVE THE NEED FOR NAT
THANK YOU
TEAM
