Specifications

NAT Overview
September 08, 2010 Page 4 of 18
WhenServer1respondstoClient1,itspacketarrivesattheNATrouterwithClient1’stranslated
addressof200.1.1.1asthedestinationaddress,butleavestheNATrouterwithClient1’sactual
addressof10.1.1.1asthedestinationaddress.Server1’sresponseisdeliveredtoIPaddress10.1.1.1.
Figure 1 Basic NAT Static Inside Address Translation
NAPT Static Inside Address Translation
Figure 2onpage 5displaysabasicNAPTstaticinside addresstranslationoverview.Client1hasa
sourceIPaddressof10.1.1.2andL4portof125(itsownIPaddressandport)andadestination
addressof200.1.1.50andL4portof80(theServer1IPaddressandport).Thestatictranslation
is
configuredbetweenthelocalIPaddress(Client1’sownIPaddressandport)andtheglobalIP
address200.1.1.1andL4port1025(anavailablepublicnetworkaddressandport).
ApacketarrivesattheNATrouterfromClient1withasourceaddressof10.1.1.2:125,butleaves
theNATrouter
withasourceaddressof200.1.1.1:1025.Inbothcasesthedestinationisfor
Server1’sIPaddressof200.1.1.50:80.FromServer1’spointofview,Client1’sIPaddressis
200.1.1.1:1025.Server1doesn’tknowanythingaboutitsactualIPaddressof10.1.1.2:125.
WhenServer1respondstoClient1,itspacketarrivesattheNATrouter
withClient1’stranslat ed
addressof200.1.1.1:1025asthedestinationaddress,butleavestheNATrouterwithClient1’s
actualaddressof10.1.1.2:125asthedestinationaddress.Server1’sresponseisdeliveredtoIP
address10.1.1.2:125.
Client1
10.1.1.1
Server1
200.1.1.50
NAT
ROUTER
DA: 200.1.1.50
SA: 200.1.1.1
External
Public
Network
Internal
Private
Network
DA: 200.1.1.1
SA: 200.1.1.50
DA: 200.1.1.50
SA: 10.1.1.1
DA: 10.1.1.1
SA: 200.1.1.50