Network Address Translation (NAT) is a technique that is used to modify network address information within IP packet headers during transit across a traffic routing device. This enables mapping one IP address to another to protect network address credentials. In typical deployment models, NAT is used as an IP masquerading technique to hide private IP addresses behind a single, public facing, IP address.
NAT can provide a profile outbound Internet access to wired and wireless hosts connected to a controller, service platform or access point (AP). Many-to-one NAT is the most common NAT technique for outbound Internet access. Many-to-one NAT allows a controller, service platform or AP to translate one or more internal private IP addresses to a single, public facing, IP address assigned to a 10/100/1000 Ethernet port or 3G card.
Note
NAT only provides IP address translation and does not provide a firewall. A branch deployment with NAT by itself will not block traffic from being potentially routed through a NAT device. Consequently, NAT should be deployed with a stateful firewall.