Network Address Translation (NAT)

by Amir Sadeghian Posted on | Information Security

Public IP addresses are rare to find, especially classes A, B & C. Recently IP version 6 introduced to address this problem. However IPV6 adoption is slow and can’t practically be helpful in the near future. To address this problem network administrators usually use private IP addresses on local networks. Private IP addresses allow computers and other devices on the network to communicate with each other. But the disadvantage of this type of IP addresses is that they are not routable on the Internet. In other words, they are not accessible from outside their private network. For instance, if a device uses a local IP address to communicate to a destination on the internet, the destination expected to send its reply to source local IP address which doesn’t exist on the internet and all replies would be lost. The solution to this problem is Network Address Translation(NAT). NAT devices which usually are firewalls sits at the boundary of local network and internet and they pick all the packets that are arriving or leaving the network. Then it will assign the NAT public address to the packets that are leaving the network and store their private address and assigned public address in NAT table. When a response coming back to NAT from the internet, NAT will look up in the NAT table and will find the IP address which is the actual recipient of the packet on the local network, and will send the packet to that device.

                                   ,----, 
         ,--.                    ,/   .`| 
       ,--.'|   ,---,          ,`   .'  : 
   ,--,:  : |  '  .' \       ;    ;     / 
,`--.'`|  ' : /  ;    '.   .'___,/    ,'  
|   :  :  | |:  :       \  |    :     |   
:   |   \ | ::  |   /\   \ ;    |.';  ;   
|   : '  '; ||  :  ' ;.   :`----'  |  |   
'   ' ;.    ;|  |  ;/  \   \   '   :  ;   
|   | | \   |'  :  | \  \ ,'   |   |  '   
'   : |  ; .'|  |  '  '--'     '   :  |   
|   | '`--'  |  :  :           ;   |.'    
'   : |      |  | ,'           '---'      
;   |.'      `--''                        
'---'