

Does NAT occur before or after routing?Ī. Refer to Cisco Feature Navigator in order to use this tool. The Cisco Feature Navigator tool allows customers to identify a feature (NAT) and find on which release and hardware version this Cisco IOS Software feature is available. On which Cisco routing hardware is Cisco IOS NAT available? How can the hardware be ordered?Ī. Refer to NAT Configuration Examples for more information on the configuration of NAT on Cisco PIX devices (includes the traffic types supported).

The main differences include the different traffic types supported in the implementations. Cisco IOS software-based NAT is not fundamentally different from the NAT function in the Cisco PIX Security Appliance. What are the main differences between the Cisco IOS ® Software and Cisco PIX Security Appliance implementations of NAT?Ī. In order to configure Nat Virtual Interface (NVI), you need at least one interface configured with NAT enable along with the same set of rules as mentioned above.įor more information, refer to Cisco IOS IP Addressing Services Configuration Guide or Configuring the NAT Virtual Interface. In order to configure traditional NAT, you need to make at least one interface on a router (NAT outside) and another interface on the router (NAT inside) and a set of rules for translating the IP addresses in the packet headers (and payloads if desired) need to be configured. Basically, NAT allows a single device, such as a router, to act as an agent between the Internet (or public network) and a local network (or private network), which means that only a single unique IP address is required to represent an entire group of computers to anything outside their network.Ī.

NAT offers the dual functions of security and address conservation and is typically implemented in remote-access environments.Ī. This provides additional security by effectively hiding the entire internal network behind that address. NAT operates on a router, usually connecting two networks together, and translates the private (not globally unique) addresses in the internal network into legal addresses, before packets are forwarded to another network.Īs part of this capability, NAT can be configured to advertise only one address for the entire network to the outside world. It enables private IP networks that use unregistered IP addresses to connect to the Internet. Network Address Translation (NAT) is designed for IP address conservation. This document provides answers to frequently asked questions about Network Address Translation (NAT).Ī.
