Editing Network address translation (section)

== Variant terms ==

=== DNAT ===<!--[[DNAT]] and similar redirects here-->
Destination network address translation (DNAT) is a technique for transparently changing the destination [[IP address]] of a routed packet and performing the inverse function for any replies. Any [[Router (computing)|router]] situated between two endpoints can perform this transformation of the packet.

DNAT is commonly used to publish a service located in a private network on a publicly accessible IP address.  This use of DNAT is also called [[port forwarding]], or [[DMZ (computing)|DMZ]] when used on an entire [[Server (computing)|server]], which becomes exposed to the WAN, becoming analogous to an undefended military [[demilitarized zone]] (DMZ).

=== SNAT ===
The meaning of the term ''SNAT'' varies by vendor:<ref>{{cite web|url=https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/ios-software-releases-12-2-t/prod_white_paper0900aecd8052870b.html|title=Enhanced IP Resiliency Using Cisco Stateful NAT|website=Cisco}}</ref><ref>{{cite web|url=https://www.watchguard.com/help/configuration-examples/nat_to_email_servers_configuration_example%20(en-US).pdf |archive-url=https://web.archive.org/web/20130117155643/https://www.watchguard.com/help/configuration-examples/nat_to_email_servers_configuration_example%20(en-US).pdf |url-status=dead |title=Use NAT for Public Accessto Servers with Private IP Addresses on the Private Network (WatchGuard configuration example) |archive-date=2013-01-17 |website=www.watchguard.com }}</ref><ref>{{Cite web|url=https://support.f5.com/csp/article/K7820|title=K7820: Overview of SNAT features|date=August 28, 2007|website=AskF5|access-date=February 24, 2019}}</ref>
* ''source NAT'' is a common expansion and is the counterpart of ''destination NAT'' (''DNAT'').  This is used to describe one-to-many NAT; NAT for outgoing connections to public services.
* ''stateful NAT'' is used by [[Cisco Systems]]<ref>{{cite web|url=https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/ios-software-releases-12-2-t/prod_white_paper0900aecd8052870b.html|title=Enhanced IP Resiliency Using Cisco Stateful NAT|website=Cisco}}</ref>
* ''static NAT'' is used by WatchGuard<ref>{{cite web|url=https://www.watchguard.com/help/configuration-examples/nat_to_email_servers_configuration_example%20(en-US).pdf |archive-url=https://web.archive.org/web/20130117155643/https://www.watchguard.com/help/configuration-examples/nat_to_email_servers_configuration_example%20(en-US).pdf |url-status=dead |title=Use NAT for Public Accessto Servers with Private IP Addresses on the Private Network (WatchGuard configuration example) |archive-date=2013-01-17 |website=www.watchguard.com }}</ref>
* ''secure NAT'' is used by [[F5, Inc.|F5]]<ref>{{Cite web|url=https://support.f5.com/csp/article/K7820|title=K7820: Overview of SNAT features|date=August 28, 2007|website=AskF5|access-date=February 24, 2019}}</ref> and by Microsoft (in regard to the [[ISA Server]])

Secure network address translation (SNAT) is part of Microsoft's [[Internet Security and Acceleration Server]] and is an extension to the NAT driver built into [[Microsoft Windows Server]]. It provides connection tracking and filtering for the additional network connections needed for the [[FTP]], [[ICMP]], [[H.323]], and [[PPTP]] protocols as well as the ability to configure a transparent HTTP [[proxy server]].

=== Dynamic network address translation ===
[[File:Dynamic NAT-en.svg|thumb|How dynamic NAT works.]]
Dynamic NAT, just like static NAT, is not common in smaller networks but is found within larger corporations with complex networks. Where static NAT provides a one-to-one internal to public static IP address mapping, dynamic NAT uses a ''group'' of public IP addresses.<ref>{{cite web |url=https://study-ccna.com/dynamic-nat/ |title=Dynamic NAT |date=26 January 2016 |access-date=2022-04-19}}</ref><ref>{{cite web |url=https://docs.oracle.com/cd/E19047-01/sunscreen32/806-6347/6jfa0g880/index.html |title=Dynamic NAT |access-date=2022-04-19}}</ref>