NAT (Network Address Translation) in Computer Networks - Step-by-Step Execution

Concept Flow - NAT (Network Address Translation)

Device sends packet with private IP

↓

Packet reaches NAT router

↓

Router replaces private IP with public IP

↓

Packet sent to internet with public IP

↓

Response from internet arrives at router

↓

Router replaces public IP with private IP

↓

Packet delivered to correct device inside network

NAT changes private IP addresses to a public IP when sending data out, and reverses this for incoming data, allowing multiple devices to share one public IP.

Execution Sample

Computer Networks

Device IP: 192.168.1.2
Router public IP: 203.0.113.5
Send packet to internet
Router replaces 192.168.1.2 with 203.0.113.5
Internet replies to 203.0.113.5
Router replaces 203.0.113.5 with 192.168.1.2
Packet delivered to device

Shows how a device's private IP is translated to a public IP by the router and back again for incoming packets.

Analysis Table

Step	Packet Source IP	Packet Destination IP	Router Action	Resulting Packet IPs
1	192.168.1.2	198.51.100.10	None (packet sent from device)	Src: 192.168.1.2, Dst: 198.51.100.10
2	192.168.1.2	198.51.100.10	Replace Src IP with public IP 203.0.113.5	Src: 203.0.113.5, Dst: 198.51.100.10
3	203.0.113.5	198.51.100.10	Packet sent to internet	Src: 203.0.113.5, Dst: 198.51.100.10
4	198.51.100.10	203.0.113.5	Packet arrives at router from internet	Src: 198.51.100.10, Dst: 203.0.113.5
5	198.51.100.10	203.0.113.5	Replace Dst IP with private IP 192.168.1.2	Src: 198.51.100.10, Dst: 192.168.1.2
6	198.51.100.10	192.168.1.2	Packet delivered to device	Src: 198.51.100.10, Dst: 192.168.1.2
7	-	-	-	End of translation cycle

💡 Packet delivered to device; NAT translation complete

State Tracker

Variable	Start	After Step 2	After Step 5	Final
Source IP	192.168.1.2	203.0.113.5	198.51.100.10 (response source)	198.51.100.10
Destination IP	198.51.100.10	198.51.100.10	192.168.1.2	192.168.1.2

Key Insights - 3 Insights

Why does the router change the source IP address before sending the packet to the internet?

Because private IPs like 192.168.x.x are not valid on the internet, the router replaces it with its public IP (203.0.113.5) so the packet can be routed properly, as shown in step 2 of the execution_table.

How does the router know which private IP to replace the public IP with when a response comes back?

The router keeps a translation table mapping the public IP and port to the private IP and port. When the response arrives (step 4), it uses this table to replace the destination IP back to the correct private IP (step 5).

What happens if two devices try to send packets at the same time using NAT?

The router assigns different port numbers to each connection along with the public IP, allowing it to track multiple devices simultaneously. This is part of how NAT manages multiple translations.

Visual Quiz - 3 Questions

Look at the execution_table at step 2. What is the source IP after the router action?

A 198.51.100.10

B 203.0.113.5

C 192.168.1.2

D Unknown

💡 Hint

Check the 'Resulting Packet IPs' column at step 2 in the execution_table.

At which step does the router replace the destination IP back to the private IP?

A Step 5

B Step 3

C Step 1

D Step 6

💡 Hint

Look for the router action that mentions replacing the destination IP in the execution_table.

If the device IP changed to 192.168.1.3, how would the source IP in the packet after step 2 change?

A It would change to 192.168.1.3

B It would change to a new public IP

C It would stay 203.0.113.5

D It would become 198.51.100.10

💡 Hint

Remember the router replaces the private IP with its own public IP, which does not depend on the device's private IP.

Concept Snapshot

NAT translates private IP addresses to a public IP for internet communication.
Router replaces source IP of outgoing packets with its public IP.
Incoming packets have destination IP replaced back to private IP.
Allows multiple devices to share one public IP.
Uses a translation table to track connections.

Full Transcript

Network Address Translation (NAT) works by changing the private IP address of a device inside a local network to a public IP address when sending data to the internet. When a device sends a packet, it has a private IP like 192.168.1.2. The NAT router replaces this private IP with its own public IP, for example 203.0.113.5, so the packet can travel on the internet. When the response comes back to the router's public IP, the router changes the destination IP back to the device's private IP and delivers the packet inside the network. This process allows many devices to share a single public IP address. The router keeps track of these translations in a table to know which private IP corresponds to each public IP and port combination. This explanation is shown step-by-step in the execution table and variable tracker, helping beginners visualize how NAT works.

Practice

1. What is the main purpose of NAT (Network Address Translation) in a home network?

easy

A. To block all incoming internet traffic

B. To assign unique public IP addresses to every device

C. To allow multiple devices to share one public IP address

D. To increase the speed of the internet connection

Solution

1. Step 1: Understand NAT's role in IP address sharing

   NAT allows many devices inside a private network to use a single public IP address when accessing the internet.

2. Step 2: Compare options with NAT's function

   Only To allow multiple devices to share one public IP address correctly describes NAT's main purpose. Other options describe unrelated functions.

3. Final Answer:

   To allow multiple devices to share one public IP address -> Option C

4. Quick Check:

   NAT shares public IP = A [OK]

Hint: NAT shares one public IP among many devices [OK]

Common Mistakes:

• Thinking NAT assigns unique public IPs to each device
• Confusing NAT with firewall functions
• Believing NAT speeds up internet connection

2. Which of the following is the correct description of NAT?

easy

A. It translates private IP addresses to public IP addresses

B. It encrypts data packets for secure transmission

C. It assigns MAC addresses to devices

D. It manages domain name resolution

Solution

1. Step 1: Identify NAT's function

   NAT changes private IP addresses used inside a network to public IP addresses for internet communication.

2. Step 2: Eliminate unrelated options

   Encrypting data packets for secure transmission, assigning MAC addresses to devices, and managing domain name resolution are not NAT functions.

3. Final Answer:

   It translates private IP addresses to public IP addresses -> Option A

4. Quick Check:

   NAT translates IPs = A [OK]

Hint: NAT changes private IPs to public IPs [OK]

Common Mistakes:

• Confusing NAT with encryption or DNS
• Thinking NAT assigns MAC addresses
• Mixing NAT with firewall roles

3. Consider a network using NAT with one public IP address. If three devices inside the network send requests to the internet simultaneously, what happens to their private IP addresses?

medium

A. They are all replaced by the same public IP address with different port numbers

B. They remain unchanged and are visible on the internet

C. Each device is assigned a new unique public IP address

D. The private IP addresses are encrypted and sent as is

Solution

1. Step 1: Understand NAT behavior with multiple devices

   NAT replaces private IPs with a single public IP and uses different port numbers to distinguish devices.

2. Step 2: Analyze options based on NAT's port translation

   They are all replaced by the same public IP address with different port numbers correctly describes this behavior. Private IPs are not left unchanged and visible on the internet, each device is not assigned a unique public IP address, and private IP addresses are not encrypted and sent as is.

3. Final Answer:

   They are all replaced by the same public IP address with different port numbers -> Option A

4. Quick Check:

   NAT uses one IP + ports = B [OK]

Hint: NAT uses one IP plus ports for multiple devices [OK]

Common Mistakes:

• Assuming private IPs are visible on the internet
• Thinking each device gets a unique public IP
• Confusing NAT with encryption

4. A network administrator configures NAT but notices that some devices cannot access the internet. Which of the following is the most likely cause?

medium

A. The devices are connected via Wi-Fi

B. The devices have public IP addresses instead of private IPs

C. The DNS server is down

D. The NAT table is full and cannot translate new addresses

Solution

1. Step 1: Identify common NAT issues

   NAT uses a translation table to map private to public IPs. If this table is full, new devices cannot be translated.

2. Step 2: Evaluate other options

   Devices having public IPs is unusual but not a cause of NAT failure. DNS issues affect name resolution, not NAT. Wi-Fi connection does not prevent NAT.

3. Final Answer:

   The NAT table is full and cannot translate new addresses -> Option D

4. Quick Check:

   Full NAT table blocks translation = D [OK]

Hint: Full NAT table blocks new device translations [OK]

Common Mistakes:

• Blaming DNS for NAT translation issues
• Assuming Wi-Fi causes NAT failure
• Confusing IP address types as cause

5. A company uses NAT to allow 100 devices to access the internet through one public IP address. If the NAT device supports only 50 simultaneous translations, what is the best solution to ensure all devices can connect without issues?

hard

A. Disable NAT and let devices use private IPs directly

B. Add more public IP addresses and configure NAT to use them

C. Assign static private IPs to all devices

D. Increase the Wi-Fi signal strength

Solution

1. Step 1: Understand NAT translation limits

   The NAT device can only handle 50 simultaneous translations, but 100 devices need internet access, causing a bottleneck.

2. Step 2: Find a solution to increase translation capacity

   Adding more public IP addresses allows NAT to handle more simultaneous translations by distributing the load.

3. Step 3: Evaluate other options

   Static private IPs do not solve translation limits. Disabling NAT breaks internet access. Wi-Fi strength does not affect NAT capacity.

4. Final Answer:

   Add more public IP addresses and configure NAT to use them -> Option B

5. Quick Check:

   More public IPs increase NAT capacity = C [OK]

Hint: More public IPs increase NAT translation capacity [OK]

Common Mistakes:

• Thinking private IP assignment solves NAT limits
• Disabling NAT to fix translation issues
• Confusing Wi-Fi strength with NAT capacity