|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/network-address-translation-nat-by-arash-deljoo/
课程评论:没有评论
**万门互联地址转换(NAT)课程总结** 本课程由 Arash Deljoo 讲授,深入探讨了万门互联地址转换(NAT)技术。NAT 是一种通过修改 IP 数据包头部的网络地址信息,将一个 IP 地址空间映射到另一个 IP 地址空间的路由技术。 **主要内容:** * **NAT 的起源与目的:** 最初用于在网络迁移或更换 ISP 时,避免为每个主机重新分配地址,以及绕过无法路由私有地址空间的问题。当前,NAT 已成为 IPv4 地址耗尽背景下,节约全球 IP 地址空间的重要且流行的工具。一个 NAT 网关的互联网可路由 IP 地址可以供整个私有网络使用。 * **NAT 的配置与应用:** * 介绍如何配置 NAT 以节约 IP 地址。 * 讲解如何配置内部和外部源地址。 * 阐述配置 NAT 以节约 IP 地址的优势。 * **NAT 的工作原理与优势:** * NAT 允许使用非注册 IP 地址的私有 IP 互联网络连接到互联网。 * NAT 通常在连接两个网络的设备上运行。 * 在转发数据包到另一个网络之前,NAT 会将内部网络中的私有 IP 地址(非全球唯一)转换为合法的 IP 地址。 * NAT 可以配置为仅向外部世界宣告一个地址代表整个内部网络,从而通过隐藏整个内部网络来提供更高的安全性。 **核心价值:** 本课程为学习者提供了配置 NAT 的实用技能,并深刻理解了 NAT 在 IP 地址节约和网络安全方面的关键作用。
Network address translation (NAT) is a method of mapping an IP address space into another by modifying network address information in the IP header of packets while they are in transit across a traffic routing device. The technique was originally used to bypass the need to assign a new address to every host when a network was moved, or when the upstream Internet service provider was replaced, but could not route the network's address space. It has become a popular and essential tool in conserving global address space in the face of IPv4 address exhaustion. One Internet-routable IP address of a NAT gateway can be used for an entire private network.This course describes how to configure Network Address Translation (NAT) for IP address conservation and how to configure inside and outside source addresses. This course also provides information about the benefits of configuring NAT for IP address conservation.NAT enables private IP internetworks that use nonregistered IP addresses to connect to the Internet. NAT operates on a device, usually connecting two networks. Before packets are forwarded onto another network, NAT translates the private (not globally unique) addresses in the internal network into legal addresses. NAT can be configured to advertise to the outside world only one address for the entire network. This ability provides more security by effectively hiding the entire internal network behind that one address.