IP naslovi - 192 ali 10
- Ustvarjalec teme R0KY
- Začetni datum
lahko je....... tega nism reku...
ampak bod pošten, kva je recimo v pocenskih rutejih pod nat... samo port forwarding....
nat pa je lahko brez enga samga rula, sej opevpn recimo uporablja nat recimo primer 10.0.8.6 routa v 192.168.200.8...
ampak še enkrat nat si v routerjih fičfirič razlagajo kot port forwading ne kot routing adress je tako??
ampak bod pošten, kva je recimo v pocenskih rutejih pod nat... samo port forwarding....
nat pa je lahko brez enga samga rula, sej opevpn recimo uporablja nat recimo primer 10.0.8.6 routa v 192.168.200.8...
ampak še enkrat nat si v routerjih fičfirič razlagajo kot port forwading ne kot routing adress je tako??
lej, vsakic k mas ti za routerjem racunalnik, in bi nekdo na tem racunalniku rad sel na alter prebrat poste je NAT v uporabi.
Translation of the Endpoint
With NAT, all communication sent to external hosts actually contain the external IP address and port information of the NAT device instead of internal host IPs or port numbers.
When a computer on the private (internal) network sends a packet to the external network, the NAT device replaces the internal IP address in the source field of the packet header (sender's address) with the external IP address of the NAT device. PAT may then assign the connection a port number from a pool of available ports, inserting this port number in the source port field (much like the post office box number), and forwards the packet to the external network. The NAT device then makes an entry in a translation table containing the internal IP address, original source port, and the translated source port. Subsequent packets from the same connection are translated to the same port number.
The computer receiving a packet that has undergone NAT establishes a connection to the port and IP address specified in the altered packet, oblivious to the fact that the supplied address is being translated (analogous to using a post office box number).
A packet coming from the external network is mapped to a corresponding internal IP address and port number from the translation table, replacing the external IP address and port number in the incoming packet header (similar to the translation from post office box number to street address). The packet is then forwarded over the inside network. Otherwise, if the destination port number of the incoming packet is not found in the translation table, the packet is dropped or rejected because the PAT device doesn't know where to send it.
NAT will only translate IP addresses and ports of its internal hosts, hiding the true endpoint of an internal host on a private network.
Translation of the Endpoint
With NAT, all communication sent to external hosts actually contain the external IP address and port information of the NAT device instead of internal host IPs or port numbers.
When a computer on the private (internal) network sends a packet to the external network, the NAT device replaces the internal IP address in the source field of the packet header (sender's address) with the external IP address of the NAT device. PAT may then assign the connection a port number from a pool of available ports, inserting this port number in the source port field (much like the post office box number), and forwards the packet to the external network. The NAT device then makes an entry in a translation table containing the internal IP address, original source port, and the translated source port. Subsequent packets from the same connection are translated to the same port number.
The computer receiving a packet that has undergone NAT establishes a connection to the port and IP address specified in the altered packet, oblivious to the fact that the supplied address is being translated (analogous to using a post office box number).
A packet coming from the external network is mapped to a corresponding internal IP address and port number from the translation table, replacing the external IP address and port number in the incoming packet header (similar to the translation from post office box number to street address). The packet is then forwarded over the inside network. Otherwise, if the destination port number of the incoming packet is not found in the translation table, the packet is dropped or rejected because the PAT device doesn't know where to send it.
NAT will only translate IP addresses and ports of its internal hosts, hiding the true endpoint of an internal host on a private network.
maš prav.........
vem kaj mi hočeš povedat... sej sem ti povdal primer openvpn ki nardi isto gre iz 10.0.8.1 v 192.168.200.0/24 recimo... to je dejansko nat..
samo kaj pa routerji uporabljajo za nat
vpiši ip
port public
port local
in to je to... kje maš pol klele nat.. pa pod nat rubriko je? o tem govorim... čeprav to dejansko ni nat ampak port forwading. Drgač maš prav dejansko sem narobe napisal, kot da je nat port forwading......
boš zadovoljen z odogovorom
vem kaj mi hočeš povedat... sej sem ti povdal primer openvpn ki nardi isto gre iz 10.0.8.1 v 192.168.200.0/24 recimo... to je dejansko nat..
samo kaj pa routerji uporabljajo za nat
vpiši ip
port public
port local
in to je to... kje maš pol klele nat.. pa pod nat rubriko je? o tem govorim... čeprav to dejansko ni nat ampak port forwading. Drgač maš prav dejansko sem narobe napisal, kot da je nat port forwading......
boš zadovoljen z odogovorom
Nazadnje urejeno:
Govorim o masquerade NATu (tipu Source NATa), ki ga velika večina ljudi uporablja doma. Primer konfiguracije Vyatte.
Priponke
-
1381943-masquerade.png
Tukaj je uporabljen izraz masquerade samo zato, ker je Vyatta v resnici Linux. Na Linuxu z Netfiltrom pa imaš tri tipe NAT (kar je sicer laž
). Za preslikavo izvornega naslova imaš SNAT (pa SAME) in MASQUERADE, kjer je razlika samo v tem, da pri slednjem preslikava deluje tudi v primeru, da se omrežni napravi zamenja IP naslov, torej pride prav pri dinamično dodeljenih IP naslovih. Za preslikavo ciljnega IP naslova pa DNAT, kar potem večina vmesnikov za nastavljanje označi kot »port forwarding«., s tem, da za to funkcijo ni zadosti samo NAT ampak še usmerjanje paketov.
No pa v resnici imaš potem še NETMAP, REDIRECT, ampak ne bomo o tem.
Ostali OS ne poznajo izraza masquerade ampak uporabljajo NAT, »connection sharing«, itd.
No pa v resnici imaš potem še NETMAP, REDIRECT, ampak ne bomo o tem.
Ostali OS ne poznajo izraza masquerade ampak uporabljajo NAT, »connection sharing«, itd.
Vem zakaj se gre, mi ni potrebno razlagati. Izraz uporablja tudi IBM in Cisco ... še z vsemi, s katerimi sem o stvar govoril, so vedeli, zakaj se gre.
S tem pa ne vem, kaj si želel povedati ... seveda je, Vyatta je pač Linux distribucija z dodanimi networking aplikacijami.
S tem pa ne vem, kaj si želel povedati ... seveda je, Vyatta je pač Linux distribucija z dodanimi networking aplikacijami.
Pojdi brat kako zadevi rečejo na Unixih (*BSD*, SYSV itd) in pri proizvajalcih omrežne opreme (Juniper, Cisco). Nikjer drugje ne pravijo temu masquerading, razen na Linuxu. Vsepovsod drugod pravijo (N)AT in podobno. Če človek ve kaj je IP masquerading, potem veš, da ali uporablja ali pa vsaj je uporabljal Linux za take namene.
PS. Mimogrede, zadeva je na Linuxu poimenovana po podobni funkcionalnosti Sendmaila, vendar se tam prepisujejo zadeve desno od @ v e-mail naslovih.
Točno tukaj imaš omenjen masquerading.
@derAlte: Vsak, ki je kdaj kaj resneje delal/dela z networkingom, ve kaj je masquerade NAT. Isto kot vsak računalničar ve, kaj je grep, tudi če se večinoma ukvarja z Windows mašinami.
Citat:
Uporabnik der_Alte pravi:
Zdaj se pa odloči ali je masquerade ali NAT.
Oboje skupaj - Masquerade NAT. Sem že v prvem postu napisal, da gre za podvrsto SNAT-a. Če citiram dokumentacijo Vyatte:
There are three main types of NAT:
• Source NAT. This is also called SNAT. “Masquerade” NAT is a special type of
SNAT.
• Destination NAT. This is also called DNAT.
• Bidirectional NAT. When both SNAT and DNAT are configured, the result is
bidirectional NAT.
Stran 15
Se ti norca delaš ali nisi prebral mojega prvega posta v tej temi?
Ali pa samo zmeden kot pisec dokumentacije pri Vyatti. V Netfiltru ni nobenega »masquerade NAT« ampak je samo »masquerading«.
»Masquerading NAT« spada med debilnosti tipa HDD disc, CD disc, DVD disc, ...
»Masquerading NAT« spada med debilnosti tipa HDD disc, CD disc, DVD disc, ...
