13 - NAT Explained
- Last time very theoretical
- Ignored NAT
- Going to add in NAT to the picture
- getting to the end of the all theory sessions
- IP addresses are unique on the internet
- This is true on the whole internet
- but on your local network, or LAN, this doesn't have to be true
- there are 3 blocks of IP addresses set aside as "unroute-able," or unable to be routed over the public internet, for use on LANs
- 192.168.x.x
- 10.x.x.x
- 172.16.x.x thru 172.31.x.x
- these addresses can be repeated between LANs, just not within a LAN
- If we have these special IP addresses in our LAN, how can we talk to the internet?
- This is where NAT, or Network Address Translation, comes into play
- Your LAN, i.e., your router, is assigned a Public, Internet IP address
- your router relays the traffic
- In essence, NAT allows for networks within the Network (the INTERNET)
- One convenient Side effect of NAT
- all the traffic has to be initiated from the inside out, and incoming traffic must be a response
- thus, any unrequested packets knocking on the NAT router asking to come in, it has no idea what to do with, so it just drops them.
- It then becomes an inherent firewall
- If you need to take incoming traffic, you need to open a port (think of it as a little porthole in the firewall to allow traffic thru) in your NAT router
- the port forwarding, as it is called, tells the router,
- send traffic of this type coming in on this port, over to this private IP address on the LAN
- This whole process, however, can be rather bothersome and annoying
- A protocol was then created, called Universal Plug and Play, or UPnP
- it is also called NAT-PnP
- This is convenient, but it also opens holes for malicious software to do nefarious things to your LAN
- Thus, it is generally wise to turn this off if you don't need it, and open the specific ports instead
- THEORY IS DONE!
- Command
- ifconfig
- going to go over it in more detail later
- shows you how your network settings are configured
- IP addresses
- MAC addresses
- etc.
- Bart Busschots
- bartb.ie
- impodcast.tv
- podfeet.com