Network Address Translation (NAT) Server:

Nat us an Internet Protocol (IP) translation process that allows a network with private addresses to
access information on the Internet. If the NAT routing protocol is installed and configured on a server
that runs Routing and Remote Access, internal network clients with private Internet Protocol (IP)
addresses can access the Internet through the eternal interface of the NAT server. This is much like of
a pro! server "ut it does not have an! cache.
To configure server 2003 as a NAT server
#ollow these steps to accomplish the task
$. %n the Administrative Tools menu, click Routing and Remote Access.

&. In the Routing and Remote Access, epand !our server_name (where server_name is the
name of the server that !ou want to configure) and then epand I Routing in the left pane.

'. Right(click )eneral and then click New Routing rotocol.
*. +lick to select the NAT!"asic #irewall check "o and then click $%.

,. Right(click NAT-.asic #irewall in the left pane and then click New Interface.
/. +lick the interface that represents !our internal network interface and then click $%.

0. In the Network Address Translation properties, click rivate interface connected to &rivate
network and then click $%.

1. Right(click NAT-.asic #irewall in the left pane and then click New Interface.
2. +lick the interface that represents !our eternal network interface and then click $%.

$3. In Network Address Translation properties, click u'lic interface connected to t(e
Internet. #or a dial(up connection to the Internet, select the demand(dial interface that is
configured to connect to !our I4P. +lick to select the )na'le NAT on t(is interface check "o
and then click %5.

The NAT server can automaticall! assign IP addresses to internal network clients. 6ou ma! want to
use this functionalit! if !ou do not have a 78+P server that is alread! assigning addressing
information to clients on the internal network.
To *onfigure NAT Server to Assign I Addresses and erform ro+, -NS .ueries
#ollow these steps in order to accomplish the task
$. Right(click NAT-.asic #irewall in the left pane and then click ro&erties.

&. +lick the Address Assignment ta" and then click to select the Automaticall, assign I
addresses ', using t(e -/* allocator check "o.
'. In the I address "o, t!pe a network I7.
*. In the 0ask "o, t!pe a su"net mask.
,. 6ou can also eclude IP addresses from the range !ou are defining so that the ecluded IP
addresses can "e assigned to specific computers on the private network "! clicking )+clude and
adding IP addresses.

/. +lick the Name Resolution ta" and then click to select the *lients using -omain Name
S,stem (-NS) check "o.
0. If !ou use a demand(dial interface to connect to the Internet, click to select the *onnect to
t(e &u'lic network w(en a name needs to 'e resolved check "o.
1. In the 7emand(dial interface "o, click the interface to dial.

2. +lick A&&l, and then click $%.
To *onfigure a 1indows Server 20032"ased *om&uter to 3se a NAT Server
#ollow these steps in order to accomplish the task
$. %pen Network +onnections, right click 4ocal Area *onnection and click ro&erties.

&. +lick Internet rotocol (T*!I) and +lick ro&erties.
'. In the -efault gatewa, "o, t!pe the internal IP address of the NAT server and !our IP
address with 9ask.
*. +lick $%, click $%, and then click *lose.

If !our computer receives its IP address from a 7!namic 8ost +onfiguration Protocol (78+P) server,
click Advanced, click the I Settings ta", under 5atewa, click Add, t!pe the internal IP address of
!our NAT server, click Add, click $%.
Summar,:
After !ou follow these "asic configuration steps, internal network clients can access servers on the
Internet. :hen internal network clients send a re;uest for the Internet, the NAT protocol driver
intercepts the re;uest and forwards the re;uest to the destination Internet server. All re;uests appear to
come from the eternal IP address of the NAT server. This process hides !our internal IP addresses
scheme. The NAT server can also perform 7omain Name 4!stem (7N4) ;ueries on the "ehalf of NAT
clients. The Routing and Remote Access NAT server resolves the Internet host name that is included in
the client re;uest and then forwards the IP address to the client. If !ou are using an interface other than
a network adapter (for eample, a dial(up networking connection) to connect to the internet that does
not appear in the New Interface Properties then !ou have to make a 7emand 7ial Interface for that
connection. To make a 7emand 7ial Interface see our article<8ow to 9ake a 7emand 7ial Interface in
RRA4 in :indows 4erver &33'<.