background image
IP Addressing and Subnetting 271
inappropriately uses the same network number that is registered appropriately to a different
company, NAT can be used, but both the source and the destination IP addresses will need to be
translated. For instance, consider Figure 5-26, with Company A using a network that is
registered to Cisco (170.1.0.0):
Figure 5-26
NAT IP Address Swapping--Unregistered Networks
In this case, the client in Company A couldn't send a packet to 170.1.1.1--or, at least, if it did,
the packet would never get to the real 170.1.1.1 in Cisco's network. That is because there is a
very reasonable possibility that the private network has a route matching 170.1.1.1 in its routing
table that points to some subnet inside the private company. So, when the DNS reply comes
back past the NAT router, the DNS reply is changed by NAT so that the client in Company A
thinks www.cisco.com's IP address is 192.168.1.1. NAT not only translates the source IP
address in outgoing packets, but it also translates the destination. Likewise, packets returning
to Company A have both the source and the destination IP addresses changed.
NAT uses terminology to define the various IP addresses used for translation. Table 5-26
summarizes the terminology and meaning.
Table 5-26
NAT Addressing Terms
Term
Meaning
Value in Figure
5-26
Inside local
Address of the host in the private network. When NAT is
needed, this address is typically a private address or an
address in a network registered to another organization.
170.1.1.10
Inside global
The Internet (global network) view of the inside local
address. This address is in a network registered to the
company responsible for the NAT router.
200.1.1.1
Outside global
The Internet (global network) view of the address of the
host correctly attached to the Internet.
170.1.1.1
Private
Internet
170.1.1.10
NAT
Source
170.1.1.10
192.168.1.1
Destination
........
www.cisco.com
170.1.1.1
Server
Client
192.168.1.1
Source
170.1.1.10
Destination
........
200.1.1.1
Source
170.1.1.1
Destination
........
170.1.1.1
Source
200.1.1.1
Destination
........
continues
ch05.fm Page 271 Monday, March 20, 2000 5:06 PM