North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Where NAT disenfranchises the end-user ...

  • From: Bob K
  • Date: Thu Sep 06 22:32:03 2001

On Thu, 6 Sep 2001, Doug Clements wrote:

> > A business that requires direct Internet access can't use NAT at the border.
> 
> Not true. While I expect you will take this as nitpicking, one:one NAT is
> very conveniently used for servers while one:many NAT can be used for
> generic workstation access while preserving a consistent LAN numbering
> scheme. Anything that a "full" internet connection gets you will also work
> with one:one NAT.

...except current implementations of IPSEC:

http://www.isp-planet.com/technology/2001/ipsec_nat.html

Luckily, the above article also mentions the fixes that are in the
works...

-- 
Bob <[email protected]> | Yes.  I know.  That is, indeed, *not* mayonnaise.