Great Circle Associates Firewalls
(June 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Difference between NAT and IP Masquerading
From: "Willibald Kraml" <wkraml @ fiss . kpmg . co . at>
Date: Tue, 03 Jun 1997 15:28:39 +0100
To: firewalls @ GreatCircle . COM

--On Dienstag, 03. Juni 1997, 00:53 -0700 "Tony Rall"
<trall @
 almaden .
 ibm .
 com> wrote:  
> 
>>Could someone explain the difference between Network Address Translation
>>and IP Masquerading.  Which is better to use? What firewall products
>>offer which?
> NAT supports hiding n internal addresses behind m external addresses,
where n is
> usually less than m.
> 
> IPMasq is a subset of NAT where n=1.
> 
> One of these is likely available on a number of products; IBM's Firewall
(nee
> SNG) supports NAT.
> 
> Tony Rall
> 
With Linux, IP masquerading hides n internal addresses behind (normally) 1
external address; n usually is at least 2 (one network interface on the
masquerading box and at least one client on the internal network). The
xternal address can also be a dynamic IP address, so you can connect a LAN
to the Internet with a dial-up IP connection ...

Willi Kraml


Indexed By Date Previous: Re: PIX and Firewall-1
From: jonesmd @ newman (Mike Jones)
Next: Re: Plug-gw- One to many relationship
From: "Marcus J. Ranum" <mjr @ nfr . net>
Indexed By Thread Previous: Re: Difference between NAT and IP Masquerading
From: "Chris Kostick" <christopher . t . kostick @ cpmx . saic . com>
Next: Re: NSC Firewall experience?
From: Peter Carlson <carlsonp @ sprynet . com>

Google
 
Search Internet Search www.greatcircle.com