On Tue, 03 Jul 2007 12:33:42 -0400, Lewis G Rosenthal wrote:

  

NAT is just a mixed  bag. It's  great for some things and really tough for others. When you need to share a single public IP between five or ten machines, it's he only game in town and makes a lot of sense. OTOH, when you need to also allow access to four servers behind the NAT, then it becomes a sticky situation, better served with multiple public IPs.
    

I do exactly that with a Zyxel 660 - One of it's NAT configurations lets you set multiple external addresses as one to one or many to one NATable setups. So I map my external servers one to one and all the rest goes through a single many to one. Works a treat. I used to have the real world IPs go straight through, I have 8, but I had more machines than addresses so there was a NATted network via a Sparc box - but it actually meant that although all boxes could get out to the 'net they could not all talk to each other. This snazzy multi NAT setup solves everything as the LAN side is just one 192.168.0 net.