网络地址翻译 - 深圳职业技术学院.ppt.pptVIP

网络地址翻译Network Address Translation 深圳职业技术学院计算机系网络专业 教学目标（ Objectives ） 1.私有地址（Private Addressing ） 2. NAT操作（NAT Operation） 3. NAT分类（NAT Class） 4. 配置NAT (Configuring NAT) 5. NAT排错 （Troubleshooting NAT Configuration） IP Address Class and Range Class A: Class B: Class C: 公网地址和私有地址（ Public Address and Private Address） 1. 公网地址必须被注册 Public Internet addresses must be registered by a company with an Internet authority. 2. 私有地址被保留，并可以被任何人使用 Private IP addresses are reserved and can be used by anyone. NAT操作（NAT Operation） 1. NAT典型工作存根网络的边缘 A NAT enabled device typically operates at the border of a stub network. 2. 边界路由器执行NAT功能，将内部私有地址转换成公网可路由的地址。 The border gateway router performs the NAT process, translating the internal private address of a host to a public, external routable address. 1. Inside local address – 指定给内部主机使用的地址 The IP address assigned to a host on the inside network. 2. Inside global address – 从SP或NIC注册的地址，即内部主机地址被NAT转换的外部地址 A legitimate IP address assigned by the NIC or service provider that represents one or more inside local IP addresses to the outside world. 3. Address Pool-NIC或SP分配使用的多个地址 IP addresses assigned by the NIC or service provider 1.静态NAT 静态NAT的特征是内部主机地址被一对一映射到外部主机地址 Static NAT is designed to allow one-to-one mapping of local and global addresses. NAT分类（NAT Class） 2. 动态NAT 动态NAT的特征是内部主机使用地址池中的公网地址来映射 Dynamic NAT is designed to map a private IP address to a public address. Any IP address from a pool of public IP addresses is assigned to a network host. 3. 端口复用(PAT) 端口复用的特征是内部多个私有地址通过不同的端口被映射到一个公网地址，Overloading, or Port Address Translation (PAT), maps multiple private IP addresses to a single public IP address. Multiple addresses can be mapped to a single address because each private address is tracked by a port number. 理想状况下，一个单一的IP地址可以使用的端口数为4000个。 Realistically, the number of ports that can be assigned a single IP address is around 4000. PAT特征（PAT Features） 配置NAT (Configuring NAT) 静态NAT配置实例 (S