Hello and welcome to CertForums.co.uk, here we host free active certification forums with links to the best free resources for Microsoft's MCSA MCSE MCDBA Cisco's CCNA CCDA and CCNP, and CompTIA's A+ Network+ i-NET+ and Security+ certifications in the UK. If you wish to post or use other advanced features you will need to register first. Registration is absolutely free and takes only a few minutes to complete so sign up today!

If you have any problems with the registration process or your account login, please contact support

Go Back   CertForums > Computing Support Forums > Networking
Home Forums Register Search Today's Posts Mark Forums Read

end-to-end break and NAT

Post New ThreadReply
 
Thread Tools Display Modes
  #1  
Old 07-Apr-2008, 04:14 PM
kobem's Avatar
kobem kobem is offline
Valued Member
Posts: 481
Points: 0 kobem has no points
Power: 7
None
Join Date: 06 Dec 2006
Age: 24
end-to-end break and NAT

hey i am sorry again but i have been thinking something for about 2 years. And it was end-to-end
thing.

for example i am using MSN Messenger, i want to transmit a file via MSN Messenger to my friend
at his house who uses MSN Messenger. However, there is NAT implemented on my modem.This
will change my IP address(source) by matching it with the public address as you know.

And NAT is told to break the end-to-end rule. How can this become?
since just source IP address changes not the ports at the transport layer.


2- About this end-to-end rule again. let's consider the MSN Messenger. Even NAT is applied
on my modem, packets reach the destination(my friend) somehow. So what is the disadvantage
about NAT?

 
Reply With Quote
  #2  
Old 07-Apr-2008, 05:51 PM
BosonMichael's Avatar
BosonMichael BosonMichael is offline
Premium Member
Posts: 9,937
Points: 4640 BosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 points
Power: 149
None
Join Date: 02 Nov 2006
Location: near Nashville, TN
Age: 38
Certifications: MCSE+I, MCSE: Securi.. huh? out of room?
WIP: Just about everything!
Here you go!


BosonMichael
MCSE+I, MCSE: Security, MCDST, MCDBA, OCP, CCNP, CCDP, CNE, SCSA, Security+, Linux+, Server+, Network+, A+
Served proudly, US Army, 98C Intelligence Analyst, '89-'92
 
Reply With Quote
  #3  
Old 07-Apr-2008, 07:47 PM
kobem's Avatar
kobem kobem is offline
Valued Member
Posts: 481
Points: 0 kobem has no points
Power: 7
None
Join Date: 06 Dec 2006
Age: 24
hey i just have 2 months to deliver my thesis. I know IP is connectionless and do not make
end-to-end, just send the packets.

see that from wikipedia

"End-to-end connectivity is a property of the Internet that allows all nodes of the network to send packets to all other nodes of the network, without requiring intermediate network elements to further interpret them."


but even if you think IP, the intermediate devices(routers) exist between end nodes. And
these will break end-to-end.
.............
I'm trying to say is that even if you do not implement NAT but you have routers between end nodes,
end -to-end rule gets broken , am i wrong?
....................

 
Reply With Quote
  #4  
Old 07-Apr-2008, 08:54 PM
BosonMichael's Avatar
BosonMichael BosonMichael is offline
Premium Member
Posts: 9,937
Points: 4640 BosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 pointsBosonMichael has over 4000 points
Power: 149
None
Join Date: 02 Nov 2006
Location: near Nashville, TN
Age: 38
Certifications: MCSE+I, MCSE: Securi.. huh? out of room?
WIP: Just about everything!
No, not really.


BosonMichael
MCSE+I, MCSE: Security, MCDST, MCDBA, OCP, CCNP, CCDP, CNE, SCSA, Security+, Linux+, Server+, Network+, A+
Served proudly, US Army, 98C Intelligence Analyst, '89-'92
 
Reply With Quote
  #5  
Old 07-Apr-2008, 09:03 PM
Bluerinse's Avatar
Bluerinse Bluerinse is offline
Senior Moderator
Posts: 7,369
Points: 2479 Bluerinse has over 2000 pointsBluerinse has over 2000 pointsBluerinse has over 2000 pointsBluerinse has over 2000 pointsBluerinse has over 2000 pointsBluerinse has over 2000 pointsBluerinse has over 2000 pointsBluerinse has over 2000 pointsBluerinse has over 2000 pointsBluerinse has over 2000 pointsBluerinse has over 2000 points
Power: 107
None
Join Date: 29 Jun 2003
Location: The Gold Coast, QLD Australia
Certifications: C&G Electronics - MCSA (W2K) MCSE (W2K)
WIP: None but considering SBS
You are correct Kobem..

Quote:
End-to-end connectivity has been a core principle of the Internet, supported for example by the Internet Architecture Board. Current Internet architectural documents observe that NAT is a violation of the End-to-End Principle, but that NAT does have a valid role in careful design
Quote:
Drawbacks (Disadvantages)

Hosts behind NAT-enabled routers do not have true end-to-end connectivity and cannot participate in some Internet protocols. Services that require the initiation of TCP connections from the outside network, or stateless protocols such as those using UDP, can be disrupted. Unless the NAT router makes a specific effort to support such protocols, incoming packets cannot reach their destination. Some protocols can accommodate one instance of NAT between participating hosts ("passive mode" FTP, for example), sometimes with the assistance of an Application Layer Gateway (see below), but fail when both systems are separated from the Internet by NAT. Use of NAT also complicates tunneling protocols such as IPsec because NAT modifies values in the headers which interfere with the integrity checks done by IPsec and other tunneling protocols.
Source..

http://en.wikipedia.org/wiki/Network...ss_translation


"A child of five could understand this. Fetch me a child of five." <Groucho Marx>

Last edited by Bluerinse : 07-Apr-2008 at 09:05 PM.
 
Reply With Quote
  #6  
Old 07-Apr-2008, 09:25 PM
kobem's Avatar
kobem kobem is offline
Valued Member
Posts: 481
Points: 0 kobem has no points
Power: 7
None
Join Date: 06 Dec 2006
Age: 24
Quote:
Originally Posted by Bluerinse View Post
the thing i am trying to tell is that, TCP is not fully performed. If you make use of NAT or
not , you can't apply end-to-end.

so why do we blame for NAT ? what is the difference if everytime some intermediate
devices exist among end nodes?

 
Reply With Quote
  #7  
Old 08-Apr-2008, 11:58 AM
kobem's Avatar
kobem kobem is offline
Valued Member
Posts: 481
Points: 0 kobem has no points
Power: 7
None
Join Date: 06 Dec 2006
Age: 24
he please reply

 
Reply With Quote
  #8  
Old 08-Apr-2008, 12:09 PM
hbroomhall hbroomhall is offline
Premium Member
Posts: 5,973
Points: 2032 hbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 points
Power: 85
None
Join Date: 08 Sep 2005
Location: Tunbridge Wells, Kent
Certifications: ECDL A+ Network+ i-Net+
WIP: Server+
I'm afraid I'm baffled as to quite what the question is.

The article that Bluerinse points to is a very good discussion of the pros and cons.

Harry.

 
Reply With Quote
  #9  
Old 08-Apr-2008, 12:31 PM
kobem's Avatar
kobem kobem is offline
Valued Member
Posts: 481
Points: 0 kobem has no points
Power: 7
None
Join Date: 06 Dec 2006
Age: 24
Quote:
Originally Posted by hbroomhall View Post
I'm afraid I'm baffled as to quite what the question is.

The article that Bluerinse points to is a very good discussion of the pros and cons.

Harry.
i read that article.

i want to express this: even if you do not implement NAT,there are always routers among end nodes.
In Internet environment you never clinch one end to other end. (intermediary devices exist all time)
NAT is told to break down some mechanisms such as mobile IP,IPSec since NAT changes
source address of internal device(end node).

even if you do run NAT, do source and destination ports change ?

 
Reply With Quote
  #10  
Old 08-Apr-2008, 12:45 PM
hbroomhall hbroomhall is offline
Premium Member
Posts: 5,973
Points: 2032 hbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 pointshbroomhall has over 2000 points
Power: 85
None
Join Date: 08 Sep 2005
Location: Tunbridge Wells, Kent
Certifications: ECDL A+ Network+ i-Net+
WIP: Server+
Quote:
Originally Posted by kobem View Post
i read that article.

i want to express this: even if you do not implement NAT,there are always routers among end nodes.
In Internet environment you never clinch one end to other end. (intermediary devices exist all time)
NAT is told to break down some mechanisms such as mobile IP,IPSec since NAT changes
source address of internal device(end node).

even if you do run NAT, do source and destination ports change ?
NAT often implies PAT - as that article mentions.

Harry.

 
Reply With Quote
  #11  
Old 08-Apr-2008, 03:45 PM
kobem's Avatar
kobem kobem is offline
Valued Member
Posts: 481
Points: 0 kobem has no points
Power: 7
None
Join Date: 06 Dec 2006
Age: 24
Quote:
Originally Posted by hbroomhall View Post
NAT often implies PAT - as that article mentions.

Harry.
PAT yes.. i forgot it. many-to-one mapping by using ports.

 
Reply With Quote
Post New ThreadReply Spread this thread: Submit this thread to digg Submit this thread to del.icio.us


Go Back   CertForums > Computing Support Forums > Networking


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT. The time now is 10:12 PM.

Powered by vBulletin® Version 3.6.10
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
CertForums.co.uk (C) copyright 2003-2007 All Rights Reserved. Content published on CertForums.co.uk requires permission for reprint.
Hosted by Lunarpages