apparea-1----Page:4
1  2  3  4  5  6  7  8  9  10  11 

Site-Local vs. NAT
Site-local addresses are dropped, not translated, at site borders
Lack of NAT ALGs places burden on upper layers not to leak site-local addresses
Site-local does not offer the “security” of one-way connectivity
Hosts will need separate global addresses for global communication
Hosts with global addresses will be reachable from the outside, unless firewalls or filters are used

PPT Version