background image
NAT Configurations 349
The configuration in Example 11-4 declares that all addresses beginning with 10.1 be
translated. The key is which pool is used. For those source addresses that arrive on an outside
interface and that are destined for an inside interface, the translation uses the pool called
coming-in. The source addresses that arrive on an inside interface destined for the outside
interface use the pool called going-out. The access list that dictates which addresses are
matched and must use the designated pool is the same for both because all 10.1 addresses
require translation before crossing from an inside to an outside interface, or vice versa.
NAT TCP Load Distribution Configuration
NAT can be used as a simple tool for TCP load balancing. Figure 11-8 illustrates a classic
example for TCP load balancing. In the figure, Company A has four mirrored Web servers. They
advertise that users can download beta copies of their software for testing at
www.companya.com, which is found at 188.88.88.88 on the Internet. The address 188.88.88.88
is a legitimate address that Company A obtained from their service provider. NAT translates
incoming requests for 188.88.88.88 in a round-robin or rotary fashion to balance the requests
across the mirrored servers.
Figure 11-8
NAT TCP Load Distribution
Mirrored
servers
188.88.88.1
188.88.88.2
188.88.88.3
188.88.88.4
E0
S0
Internet
188.88.88.88 is
advertised as the
web location for
Company A
Internet
router