Where NAT disenfranchises the end-user ...
Bob K
melange at yip.org
Fri Sep 7 02:29:38 UTC 2001
On Thu, 6 Sep 2001, Doug Clements wrote:
> > A business that requires direct Internet access can't use NAT at the border.
>
> Not true. While I expect you will take this as nitpicking, one:one NAT is
> very conveniently used for servers while one:many NAT can be used for
> generic workstation access while preserving a consistent LAN numbering
> scheme. Anything that a "full" internet connection gets you will also work
> with one:one NAT.
...except current implementations of IPSEC:
http://www.isp-planet.com/technology/2001/ipsec_nat.html
Luckily, the above article also mentions the fixes that are in the
works...
--
Bob <melange at yip.org> | Yes. I know. That is, indeed, *not* mayonnaise.
More information about the NANOG
mailing list