Where NAT disenfranchises the end-user ...

Bob K melange at yip.org
Fri Sep 7 02:29:38 UTC 2001


On Thu, 6 Sep 2001, Doug Clements wrote:

> > A business that requires direct Internet access can't use NAT at the border.
> 
> Not true. While I expect you will take this as nitpicking, one:one NAT is
> very conveniently used for servers while one:many NAT can be used for
> generic workstation access while preserving a consistent LAN numbering
> scheme. Anything that a "full" internet connection gets you will also work
> with one:one NAT.

...except current implementations of IPSEC:

http://www.isp-planet.com/technology/2001/ipsec_nat.html

Luckily, the above article also mentions the fixes that are in the
works...

-- 
Bob <melange at yip.org> | Yes.  I know.  That is, indeed, *not* mayonnaise.




More information about the NANOG mailing list