地址翻译技术在防火墙系统中的应用

Address Translation Technology in Firewall System

随着Internet的迅速发展,IP地址缺少已经是一个十分明显的问题。为了解决IP缺少这个问题,出现了很多解决方案。虽然也有提出新一代的IPv6技术从根本上解决地址空间问题,但由于多方面的原因,NAT成为事实上广泛使用的解决方法。它主要思想是把本地的私有IP地址映射到公网的合法IP地址,以缓解可用IP地址空间的消耗。本文将介绍一种在目前网络环境中运用比较多的方法,即地址转换(NAT)技术及其在防火墙上的实现方法,以及这种技术在防火墙中的一些实际应用。

With the rapid development of Internet,there is an unsufficiency of IP addresses. A lot of solutions in solving this problem appear. Although a new generation of IPv6 technology can solve the problem of address spac fundamently, NAT has be widely used due to some reasons. Its main principle is to map the local private IP address to the legal public network IP addresses to alleviate the comsumption of the available IP address space. This paper introduces address translation technology （ NAT ）, apopular method used in the current network envi- ronment,the method of its implementation in firewall, as well as tits practical applications.