Which addresses are allowed to be accessed from the inside network

Internet Protocol works the same way as any other language, by communicating using set guidelines to pass information.

All devices find, send, and exchange information with other connected devices using this protocol. By speaking the same language, any computer in any location can talk to one another. The use of IP addresses typically happens behind the scenes. The process works like this:. As the process implies, there are different types of IP addresses, which we explore below. There are different categories of IP addresses, and within each category, different types. Every individual or business with an internet service plan will have two types of IP addresses: their private IP addresses and their public IP address.

The terms public and private relate to the network location — that is, a private IP address is used inside a network, while a public one is used outside a network. Every device that connects to your internet network has a private IP address.

This includes computers, smartphones, and tablets but also any Bluetooth-enabled devices like speakers, printers, or smart TVs. With the growing internet of things , the number of private IP addresses you have at home is probably growing. Your router needs a way to identify these items separately, and many items need a way to recognize each other.

Therefore, your router generates private IP addresses that are unique identifiers for each device that differentiate them on the network. A public IP address is the primary address associated with your whole network.

While each connected device has its own IP address, they are also included within the main IP address for your network. Your public IP address is the address that all the devices outside your internet network will use to recognize your network. Dynamic IP addresses change automatically and regularly. ISPs buy a large pool of IP addresses and assign them automatically to their customers. Periodically, they re-assign them and put the older IP addresses back into the pool to be used for other customers.

The rationale for this approach is to generate cost savings for the ISP. There are security benefits, too, because a changing IP address makes it harder for criminals to hack into your network interface. In contrast to dynamic IP addresses, static addresses remain consistent. Once the network assigns an IP address, it remains the same. Most individuals and businesses do not need a static IP address, but for businesses that plan to host their own server, it is crucial to have one.

This is because a static IP address ensures that websites and email addresses tied to it will have a consistent IP address — vital if you want other devices to be able to find them consistently on the web. This leads to the next point — which is the two types of website IP addresses. These are shared and dedicated. Websites that rely on shared hosting plans from web hosting providers will typically be one of many websites hosted on the same server.

This tends to be the case for individual websites or SME websites, where traffic volumes are manageable, and the sites themselves are limited in terms of the number of pages, etc. Websites hosted in this way will have shared IP addresses. Some web hosting plans have the option to purchase a dedicated IP address or addresses. This makes it easier to share and transfer files with multiple people within an organization and allow anonymous FTP sharing options.

A dedicated IP address also allows you to access your website using the IP address alone rather than the domain name — useful if you want to build and test it before registering your domain. Google will show you the answer at the top of the page. Other websites will show you the same information: they can see your public IP address because, by visiting the site, your router has made a request and therefore revealed the information.

Generally, you will only receive an approximation of location using this technique — where the provider is, but not the actual device location.

If you are doing this, remember to log out of your VPN too. Obtaining the actual physical location address for the public IP address usually requires a search warrant to be submitted to the ISP.

If you need to check the IP addresses of other devices on your network, go into the router. How you access the router depends on the brand and the software it uses.

Generally, you should be able to type the router's gateway IP address into a web browser on the same network to access it. From there, you will need to navigate to something like "attached devices," which should display a list of all the devices currently or recently attached to the network — including their IP addresses. Cybercriminals can use various techniques to obtain your IP address.

Two of the most common are social engineering and online stalking. Attackers can use social engineering to deceive you into revealing your IP address. For example, they can find you through Skype or a similar instant messaging application, which uses IP addresses to communicate. If you chat with strangers using these apps, it is important to note that they can see your IP address.

Attackers can use a Skype Resolver tool, where they can find your IP address from your username. Criminals can track down your IP address by merely stalking your online activity. Any number of online activities can reveal your IP address, from playing video games to commenting on websites and forums. Once they have your IP address, attackers can go to an IP address tracking website, such as whatismyipaddress. They can then cross-reference other open-source data if they want to validate whether the IP address is associated with you specifically.

They can then use LinkedIn, Facebook, or other social networks that show where you live, and then see if that matches the area given. If a Facebook stalker uses a phishing attack against people with your name to install spying malware , the IP address associated with your system would likely confirm your identity to the stalker.

In section 1, Type , select Dynamic. Click Continue. In section 2, Interfaces , choose any for the source interface and outside for the destination interface. In section 3, Packets , perform these actions : Expand the Original Address menu, click Choose and select the any-ipv4 or any-ipv6 object depending on your network configuration.

Expand the Translated Address menu, and select interface from the available list. Using NAT, you can establish a virtual host on the inside network that coordinates load sharing among real hosts. In addition to giving users more control over how NAT addresses are used, the Rate-Limiting NAT Translation feature can be used to limit the effects of viruses, worms, and denial-of-service attacks.

Static route entry is configured in the next-hop router and redistributed within the routing network. When the inside global address is matched with the local interface, NAT installs an IP alias and an ARP entry, in which case the router will proxy-arp for these addresses. If this behavior is not wanted, use the no-alias keyword. When a NAT pool is configured, the add-route option can be used for automatic route injection.

As a result, 10, translations more than would generally be handled on a single router consume about 3 MB. Therefore, typical routing hardware has more than enough memory to support thousands of NAT translations. For The current session is not maintained when failure takes place. Encapsulation does not matter for NAT. There must be an inside and an outside for NAT to function.

This can be accomplished through the use of an access list describing the set of hosts or networks that require NAT. All sessions on the same host will be either translated or will pass through the router and not be translated. Access lists, extended access lists, and route maps can be used to define rules by which IP devices get translated. The network address and appropriate subnet mask should always be specified. The keyword any should not be used in place of the network address or subnet mask.

PAT overloading divides the available ports per global IP address into three ranges: , , and It attempts to assign the same port value of the original request, but if the original source port has already been used, it starts scanning from the beginning of the particular port range to find the first available port and assigns it to the conversation.

There is an exception for To define a pool, the configuration command is used:. The following example translates between inside hosts addressed from either the In the following example, the goal is to define a virtual address, connections to which are distributed among a set of real hosts. The pool defines the addresses of the real hosts. The access list defines the virtual address. If a translation does not already exist, TCP packets from serial interface 0 the outside interface whose destination matches the access list are translated to an address from the pool.

In practical use, the maximum number of configurable IP pools is limited by the amount of available DRAM in the particular router. Cisco recommends that you configure a pool size of Each pool should be no more than 16 bits. In This has limited NAT to only have a maximum of pools. It also has the capability to map a single inside IP address to different Inside Global addresses based on the rule.

IP address overlapping refers to a situation where two locations that want to interconnect are both using the same IP address scheme.

This is not an unusual occurrence; it often happens when companies merge or are acquired. Without special support, the two locations will not be able to connect and establish sessions.

The overlapped IP address can be a public address assigned to another company, a private address assigned to another company, or can come from the range of private addresses as defined in RFC Private IP addresses are unroutable and require NAT translations to allow connections to the outside world. The solution involves intercepting Domain Name System DNS name-query responses from the outside to the inside, setting up a translation for the outside address, and fixing up the DNS response before forwarding it to the inside host.

A DNS server is required to be involved on both sides of the NAT device to resolve users wanting to have connection between both networks. Static NAT translations have one-to-one mapping between local and global addresses. Users can also configure static address translations to the port level, and use the remainder of the IP address for other translations.

The following example shows how to configure routemap to allow outside-to-inside translation for static NAT:. NAT overloading is PAT, which involves using a pool with a range of one or more addresses or using an interface IP address in combination with the port. When you overload, you create a fully extended translation. Unique source port numbers on each translation are used to distinguish between the conversations.

In dynamic NAT translations, the users can establish dynamic mapping between local and global addresses. Dynamic mapping is accomplished by defining the local addresses to be translated and the pool of addresses or interface IP address from which to allocate global addresses and associating the two.