Stuart McLachlan
stuart at lexacorp.com.pg
Sun Jun 1 21:35:09 CDT 2008
You're mixing up and combining two things there, DHCP and NAT. NAT doesn't assign addresses. DHCP (Dynamic Host Configuration Protocol) does that. Each computer in your private network has to have a separate IP Address. That address can either be fixed (you enter it into the network configuration window) or assigned from a pool by a DHCP server each time the computer is switched on and connects to your local network. Your private network uses one of three "non-routable" address ranges. (10.*.*.* , 172.16.*.*. - 172.31.*.* or 192.168.*.*) Your Internet Router has one address in this range on the "inside" and one or more separate public, "routable" addresses on the outside. Assume your Router's internal address is 192.168.1.254. Your workstation will be configured with an address such as 192.168.1.3, a mask of 255.255.255.0 and a Gateway of 192.168.1.254. Because of the mask, if you try to communicate with any computer in the 192.168.1.* range, you will talk directly to that machine. If you try to access any address outside of that range, the packets will be sent to the Gateway/Router on 192.168.1.254. The router will then send your packets to the destination computer. That destination computer will then send it's reply back to the external address of the router. Once the router receives the reply back it will send it on to your computer 192.168.1.3. Note that the destination computer doesn't know that the request has come from your workstation at 192.168.1.3, it thinks it has come from the external address of your router. NAT is the process of the router accepting packets from you, translating your network address into the routers own external address and translating it's external address back to your network address on the reply packets. The NAT software basically keeps track of all of the outbound packets from each of the computers on your internal network and redirect incoming packets to the correct originator. This can only work for messages which originate within your network. If you have a machine on your network which *listens* for requests originating from the outside, such as an FTP server, Web server, SMTP mail server or Remote Desktop, you have to configure your NAT to translate all such incoming requests to the specific machine - so-called "Port Forwarding". In this case, you can't just use an assigned DNS assigned address for the workstation, it must be configured so that it always uses the same address, and you can't use the same Port for more than one machine so in the case of Remote Desktop, you need to use a different port for each workstation. -- Stuart On 1 Jun 2008 at 21:48, jwcolby wrote: > As you probably know, NAT (Network Address Translation) > causes each computer within your network to be assigned an > IP Address, usually in the range of 192.168.x.x. The > problem with NAT addresses is that they "interfere" with > remote desktop, particularly coming in from the outside > through a router. By default, Remote Desktop uses port 3398 > as the remote access port. In order to come in through the > router, each machine has to be assigned a static IP address > by the router, and then port forwarding turned on, and > "ports" forwarded to specific IP addresses. It just becomes > messy. >