Articles Tagged ‘NAT’

Cisco Firewalls - ASA & PIX Firewall Configuration


This category contains articles covering Cisco’s popular Advanced Security Appliances (ASA) 5500/5500x series and PIX Firewalls. Thanks to the structure of the Cisco ASA 5500 series software, almost all articles are applicable to all ASA5500 series appliances, including ASA5505, ASA5510, ASA5520, ASA5540, ASA5550 and ASA5580, ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, ASA 5555-X.

The variety of topics provided include basic startup configuration, advanced configuration, NAT (PAT, Static, Dynamic and more), Firewalling – Access-lists, Firewall Management, Firewall redundancy, VPN client configuration, WebVPN (SSLVPN) configuration, software upgrades and much more.

We are continuously updating this section to provide the best up-to-date information for our readers.

We hope you enjoy the provided articles and welcome your feedback and suggestions.

Network Address Translation - NAT

Network Address Translation, defined by RFC 1631, is becoming very popular in today's networks as it's supported by almost every operating system, firewall appliance and application. NAT was born thanks to the fast depletion of public IP Addresses, in other words real IP Addresses that can only exist on the Internet.

As IP Addresses are 32 Bit, in theory we could have upto 4,294,967,296 IP Addresses (that's 2^32) ! In practice though the number is a lot smaller, somewhere around 3.2 billion, because of the way the IP Addresses are separated into Classes (Class A, B , C e.t.c) and the need to set aside special addresses for multicasting (also known as Class D), broadcasting and other functions.

This exciting section will show, and explain in detail, what NAT is, its different modes and how they work. We will also see how NAT helps protect your network and minimise network security threats.

 

So What's Covered ?

As with most cool networking topics, it's impossible to cover NAT on one page and if you happen to find another site that covers NAT in one page, I assure you you're missing out on a lot of important information, so stick to Firewall.cx :)

With all this in mind, I've split NAT into 6 sections. Each section deals with a particular NAT mode or NAT topic, giving you an in-depth look on how each NAT mode works using a few examples, and its advantages over the rest available NAT modes. The information provided has been carefully selected and written to make sure it covers all ranges of user levels, meaning from intermediate to advanced.

Section 1: NAT Concepts. A good introduction to NAT followed by its basic functions, how it works and which devices in a network usually implement NAT. Simple, clear and colourful diagrams will ensure you grasp this concept without any trouble.

Section 2: NAT Table. This section will introduce the NAT Table, which is the heart of NAT. Here you will learn the purpose of the NAT table, where it's stored along with a lot of other interesting information.

Section 3: Static NAT Mode. Learn what Static NAT is and how it functions. Two pages of detailed diagrams, well thought examples and their analysis along with other rich information ensures you will learn everything there is about Static NAT.

Section 4: Dynamic NAT Mode. Learn what Dynamic NAT is and how it functions. Simple diagrams are available to help you understand how Dynamic NAT works and what its advantages are over Static NAT. Dynamic NAT is analysed over two pages using examples and step by step analysis, ensuring to capture all the required information and answer every question you might have.

Section 5: NAT Overload Mode. Also known as IP Masquerading (in the Linux world), Port Address Translation (PAT) or Dynamic NAT with PAT. Discover the most common NAT mode for small networks. This NAT mode is used by most Internet sharing software. This section will help you understand how NAT Overload works and what its benefits are over the rest. Again, simple diagrams have been designed to make sure you grasp all this cool stuff :)

The type of NAT mode you choose to use, depends on your network resources, capabilities of your NAT-enabled device and, lastly, your needs. Together we will discover the power of NAT and understand why its become so popular.

Networking

Our popular Networking section is well-known for the variety of high-quality articles covering topics such as Network Protocols, OSI Model, IPv4 & IPv6 addressing, Subnetting, Routing, Routing protocols, CIDR-Supernettting, Ethernet technologies, VLAN Networks, Virtual Trunk Protocol (VTP), Network Address Translation (NAT), Firewalls, WAN Technologies and much more.

All articles make use of our award-winning diagrams and contain illustrations aimed to help make the learning process as easy as possible no matter how complex the topic might be.

We hope you enjoy this section and manage to master all information included.

Articles To Read Next:

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup