|
North American Network Operators Group Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical Re: Where NAT disenfranchises the end-user ...
Yep- NAT showed up in Cisco IOS in the 11.2 version. I am definitely not an expert on this subject, but a couple of things come to mind when running through these posts: NAT is almost always (or needs to be) configured in an overload state (or PAT). If your NAT pool should become to small for your users (good rule of 10 users to 1 IP), you can always check the translation statistics & start to move you pool accordingly. Unless I'm missing some sort of breach with the occasional port table (when overload begins) it works quite well with users heading to the Internet. As far as the history of NAT, it's a band aide that offers some security (sucks to trouble shoot @ times too). NAT is a selling tool today for home users & ISP's that don't want to cough up addresses. As soon as IPV6 comes online, NAT will offer almost no value add. .02 Phil ----- Original Message ----- From: "Adam McKenna" <[email protected]> To: "NANOG (E-mail)" <[email protected]> Sent: Friday, September 07, 2001 3:31 AM Subject: Re: Where NAT disenfranchises the end-user ... > > On Thu, Sep 06, 2001 at 10:29:21PM -0700, Roeland Meyer wrote: > > > > |> From: Eric A. Hall [mailto:[email protected]] > > |> Sent: Thursday, September 06, 2001 9:49 PM > > > > |> > "Charles Sprickman" <[email protected]> > > |> > > |> > NAT has it's place, and we have many happy customers that are quite > > |> > pleased with their NAT'd connections; some simple, some fancy. > > |> > > |> NATs are a band-aid. > > > > ip_masq started out as a cheap way to cheat ISPs that wouldn't allocate IP > > addrs to dial-up users (home users have no need for a LAN?), or wanted to > > charge an arm'n'leg for every IP addr. This irked the Linux community > > sufficiently that they wrote a "cure". Unfortunately, the popularity of the > > "cure" superceded the need. > > Erm, sorry, but NAT was alive and well on Cisco routers long before it was in > the Linux kernel. > > --Adam > > -- > Adam McKenna <[email protected]> | GPG: 17A4 11F7 5E7E C2E7 08AA > http://flounder.net/publickey.html | 38B0 05D0 8BF7 2C6D 110A >
|