Login
- Table of Contents
-
- 04-Policies
- 01-Security policy
- 02-Security policy redundancy analysis
- 03-Security policy hit analysis
- 04-Security policy optimization
- 05-Attack defense
- 06-Risk analysis
- 07-Blacklist
- 08-Connection limit
- 09-uRPF
- 10-IPCAR
- 11-IP reputation
- 12-Domain reputation
- 13-NAT
- 14-Policy-based NAT
- 15-NAT66
- 16-PAT translation mode
- 17-Application audit
- 18-Bandwidth management
- 19-Load balancing common configuration
- 20-Server load balancing
- 21-Outbound link load balancing
- 22-Inbound link load balancing
- 23-Transparent DNS proxy
- 24-NetShare control
- 25-Server connection detection
- 26-Application proxy
- 27-Trusted API proxies
- 28-Trusted application proxies
- 29-AFT
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 16-PAT translation mode | 18.72 KB |
PAT translation mode
Introduction
Port Address Translation (PAT) is a Dynamic NAT translation mode. PAT translates multiple private IP addresses to a single public IP address by mapping the private IP address and source port to the public IP address and a unique port.
PAT supports the following mapping modes:
· Address and Port-Dependent Mapping (APDM)—Uses different IP and port mappings for packets from the same source IP and port to different destination IP addresses and ports. APDM allows an external host to initiate connections to an internal host only under the condition that the internal host has previously accessed the external host. It is secure, but it does not allow internal hosts behind different NAT gateways to access each other.
· Endpoint-Independent Mapping (EIM)—Uses the same IP and port mapping (EIM entry) for packets from the same source IP and port to any destinations. EIM allows external hosts to initiate connections to the translated IP addresses and ports of internal hosts. It allows internal hosts behind different NAT gateways to access each other.
