the more definitions i read about this mess, the more awful and terrible they get...
inside local- the best definition i get is private address, or a private address behind the firewall ie,192.168.1.100
inside global- the inside private address natted for the outdside by NAT/firewall; how 192.168.1.100 gets translated and shipped by the firewall as 200.0.0.10
here's where the confusion starts
outside global- the natted address (outside the firewall) 200.0.0.10 on it's way to the ISP
outside local- whatever the ISP does with the address at this point, they may NAT it again, they may ship it as is considering they gave you outside addresses to use, etc., who knows
this whole concept has got to be the worst that cisco has ever come up with
the important point is that NAT will make your rfc1918 address routable for the wild so you can get to your porn...
No comments:
Post a Comment