Network Address Translation lets many private hosts share public IPv4 addresses by rewriting address/port information at a translation boundary. NAT became operationally important because public IPv4 addresses are scarce, but it also changes end-to-end connectivity assumptions. IPv6 restores a much larger address space and supports simpler globally unique addressing, while still requiring firewalls and careful policy.
Remember the shape, not the sentence
“A building can have hundreds of rooms with internal room numbers but one street address. The front desk maps outgoing conversations to the public address and remembers which internal room should receive each reply.”
Private IPv4 ranges
RFC 1918 defines 10/8, 172.16/12 and 192.168/16 for private IPv4 use. These are not globally routable addresses on the public Internet.
PAT/NAPT
In common home routers, many internal connections share one public IPv4 address by translating both addresses and transport ports, maintaining a state table for return traffic.
IPv6 is more than 'more addresses'
IPv6 expands addressing, changes header behavior, uses Neighbor Discovery instead of ARP, and supports different operational models. NAT is not the primary mechanism for IPv6 address conservation.
See the mechanism before you memorize it
One diagram, one causal story, one reconstruction task.
NAT, private ranges, and why IPv6 exists — causal map
Private host
10.0.0.24:51514 opens a connection.
NAT gateway
Rewrites source to public-ip:40001 and records the mapping.
Internet
Remote server sees the public tuple, not the private address.
Reply
The NAT table maps the response back to the internal host.
Draw the idea yourself
Rebuild the core flow on a real canvas before moving to the worked walkthrough.
Walk the system
Private host
10.0.0.24:51514 opens a connection.
NAT gateway
Rewrites source to public-ip:40001 and records the mapping.
Internet
Remote server sees the public tuple, not the private address.
Reply
The NAT table maps the response back to the internal host.
IPv6 contrast
A globally routable IPv6 address can exist without requiring address translation for scarcity.
Translation state
The translation table behaves like a temporary correspondence between internal and external flow identifiers.
inside: 10.0.0.24:51514
outside: 198.51.100.7:40001
remote: 203.0.113.10:443What usually goes wrong
Close the tab. Rebuild it from memory.
Read the question, answer aloud, then reveal.
Why can NAT break inbound connections?Reveal answer
If no existing translation state or explicit port-forwarding rule maps an unsolicited inbound packet to an internal host, the gateway does not know where to send it.
What problem did NAT help address?Reveal answer
IPv4 address scarcity and the ability to connect many private hosts through fewer public addresses.
What replaces ARP in IPv6?Reveal answer
Neighbor Discovery Protocol, which uses ICMPv6.
Make this idea travel.
Connect it next to: routing-protocols • dns • firewalls-vpn-proxies.