VLAN AND NAT

1
VLAN AND NAT
2
VLAN Overview

• An end-to-end VLAN network has several
  characteristics
• VLAN membership for users is based on department
  or job function, regardless of where the users
  are located.
• Easily move workstations on the LAN
• Easily add workstations to the LAN
• Easily change the LAN configuration
• Easily control network traffic
• Improve security

3
Static VLAN

• Static membership VLANs are called port-based and
  port-centric membership VLANs.
• As a device enters the network, it automatically
  assumes the VLAN membership of the port to which
  it is attached.

4
Dynamic VLAN

• Dynamic VLANs allow for membership based on the
  MAC address of the device connected to the switch
  port.
• As a device enters the network, the switch that
  it is connected to queries a database on the VLAN
  Configuration Server for VLAN membership

5
Network Address Translation (NAT)

• Only technique used by basic firewalls
• Enables a LAN to use one set of IP addresses for
  internal traffic and a second set for external
  traffic
• Each active connection requires a unique external
  address for duration of communication
• Port address translation (PAT)
• Derivative of NAT
• Supports thousands of simultaneous connections on
  a single public IP address

6
(No Transcript)