p3?? Flashcards
What is special about private Ipv4 addresses?
Cannot be routed over the internet, used within an organization or site to allow devices to communicate locally.
How do you allow a device with a private Ipv4 address to access resources outside the local network?
The address must be translated into a public address. NAT
What is NAT? Why do we have NAT?
NAT allows networks to use private Ipv4 addresses internally and translate them to public addresses when needed.
A device wants to communicate with a device outside of its network.
The packet gets forwarded to the border router which performs the NAT process .
Translating the internal private address of the device to a public, outside, routable address.
The primary use of NAT is to conserve public Ipv4 addresses. (running out)
What is an Inside address?
The address of the device that is being translated by NAT.
Typically private Ipv4 address.
What is an Outside address?
The address of the destination device.
What is a local address? What does it mean that they can Inside or outside?
A local address is any address that appears on the inside portion of the network.
Inside: Address of the source as seen from inside the network.
Outside: The address of the destination as seen from the inside network.
What is a Global address? What does it mean that it can be either inside or outside?
A global address is any address that appears on the outside portion of the network.
Inside: Address of source as seen from the outside network.
Outside: The address of the destination as seen from the outside network.
What is static NAT? In what areas is it useful?
Static NAT uses a one-to-one mapping of local and global addresses configured by the network admin that remain constant.
Useful for web servers or devices that must have a consistent address and devices that must be accessible by authorized personnel when offsite, but not my general public.
What is Dynamic NAT? Where is it useful?
Dynamic NAT uses a pool of public addresses and assigns them on a first-come, first-served basis.
When an inside device requests access to an outside network, dynamic NAT assigns an available public Ipv4 address from the pool.
The other addresses in the pool are still available for use.
What is Port Address Translation (NAT) NAT overload?
Maps multiple private IPv4 addresses to a single public Ipv4 address or a few addresses.
When the NAT router receives a packet from the client, it uses the source port number to uniquely identify the specific NAT translation.
PAT ensures that devices use a different TCP port number for each session with a server on the internet.
What is special about PAT and original source ports?
PAT tries to preserver the original source port. If it is already used, PAT assigns the first available port number.
When there are no more ports available and there is more than one external address in the address pool, PAT moves to the next address to try to allocate the original source port.
Process continues until there are no more available ports or external Ipv4 addresses in the address pool.
Benefits with NAT
Increases flexibility
Provides consistency
Allows the private Ipv4 address scheme to remain while allowing for easy change to a new public addressing scheme
NAT hides the Ipv4 addresses of users and other devices.
Conservers the legally registered addressing scheme by allowing privatization of intranets.
Conservers addresses through application port-lever multiplexing.
Drawbacks with NAT
Increases forwarding delays(translation)
End to end addressing is lost
End to end Ipv4 traceability is lost
NAT complicates the use of tunneling protocols IPsec
Services that require the initiation of TCP connections from the otuside network, or stateless protocols, such as those using UDP can be disrupted.
What are the two router functions?
Determine the best path using a router table(prefix(net address), prefix length)
Packet forwarding
How can routes be considered a match? And what is the longest match?
There must be at least the number of matching bits indicated by the subnet mask of the route.
Longest match is a route in the table with the greatest number of far-left matching bits with packet’s dst IP address.