NAT - How Many IP Addresses to Overload?

From: Kenneth Wygand (KWygand@customonline.com)
Date: Wed Sep 03 2003 - 15:29:32 GMT-3


When NAT is overloaded for a large network to a public IP address range,
how many IP addresses are generally required / suggested? Of course the
actual number will depend on traffic patterns and number of simultaneous
connections.

The reason I ask is because I configured a 500-user network to an
overloaded dynamic NAT pool of 10 IP addresses. When I do a "show IP
nat translations", I see every connection is being NAT'ed to the first
IP address of the pool on high port numbers. Based on this behavior, it
is my assumption that NAT will not round-robin to select the public IP
address to use for a session, but rather select the first available IP
address in the pool at the time of the translation request.

Any real-world experience or suggestions on this topic?

Kenneth E. Wygand
Systems Engineer, Project Services

CISSP #37102, CCNP, CCDP, MCP 2000, CNA 5.1, Network+, A+
Custom Computer Specialists, Inc.

"It's not just about ending up where you want to be, it's about making
the most of the trip there."
-Anonymous



This archive was generated by hypermail 2.1.4 : Wed Oct 01 2003 - 07:24:22 GMT-3