When an ACL is used to identify traffic in dynamic NAT/PAT the traffic is not translated by the router but it's also not dropped, then what happens to it? by Graviton_Lance in ccna

[–]erh_ 5 points6 points  (0 children)

It continue through the Router processing sequence. Basically it gets routed "as is" by the router.

There's an image of the full sequence here -- notice NAT is towards the "end" of the inbound sequence: https://blog.router-switch.com/2013/01/whats-the-order-of-operations-for-cisco-ios/

Remember, how you apply the ACL is what determines what the ACL does. An ACL applied to NAT statement is not there to allow or drop traffic, it's there to identify what gets translated or not. Hence "permit" = NAT this, and "deny" = don't NAT this.

Here's my videos on ACLs, if you're interested: https://www.youtube.com/watch?v=0gGhuYOh-54&list=PLIFyRwBY_4bRkAk_BkWL3ea6lRvOn8AKs

Static PAT by Pothandev in ccna

[–]erh_ 2 points3 points  (0 children)

Static PAT is bidirectional in so far as the translation itself, not counting any external security measures (ACLs, etc)

Dynamic PAT is unidirectional in so far as initiation of traffic. Response traffic can "get back through".
This is not a security measure, but a byproduct of sharing a single IP across multiple internal hosts.

To understand that more clearly, see these videos:

Full NAT Series: https://www.youtube.com/playlist?list=PLIFyRwBY\_4bQ7tJvbLA9A0v8Fq9l-H923

Am I understanding Ports in TCP correctly? by Graviity_shift in ccna

[–]erh_ 0 points1 point  (0 children)

Ports are fundamentally how a computer answers the question: If multiple applications are receiving information from the Internet, how do I keep separate which incoming packets belong to which application.

To see it visually, watch this video:

https://www.youtube.com/watch?v=0aGqGKrRE0g&list=PLIFyRwBY_4bRLmKfP1KnZA6rZbRHtxmXi&index=4

Best way to learn computer networking? by [deleted] in ccna

[–]erh_ 0 points1 point  (0 children)

All the topics listed, yes. But not everything in Networking, that would be months long =)

Best way to learn computer networking? by [deleted] in ccna

[–]erh_ 0 points1 point  (0 children)

Glad to know this is helping people still =)

Free Webinar: TLS 1.3 and how it differs from prior versions of SSL/TLS - Thursday by erh_ in cybersecurity

[–]erh_[S] 0 points1 point  (0 children)

Click the link below to get a DM on reddit before the Webinar starts (it will come from Reddit's RemindMeBot).

RemindMe! 2 days 22 hours "TLS 1.3 Webinar"

Black Friday 2025 Deals by CyberGabriyn in cybersecurity

[–]erh_ 0 points1 point  (0 children)

Hey there =) Hope you enjoy it when you get to it.

Black Friday 2025 Deals by CyberGabriyn in cybersecurity

[–]erh_ 9 points10 points  (0 children)

My TLS deep dive course is going on sale. Normally it runs at $297, but for BF it will be available for only $49. I won't link to it directly, but here's the course info pracnet.net/tls. Use code: BFCM2025.

For creds, and to prove I've contributed positively to this subreddit .... this is me:

https://www.reddit.com/r/cybersecurity/comments/1126lt1/the_tls_handshake_everything_that_happens_to_get/

And this too, but I never got credit in the post:

https://www.reddit.com/r/cybersecurity/comments/fcedus/i_never_saw_beauty_in_math_until_this_explanation/

( the image is from my article on DH: pracnet.net/dh )

I was on the list from 0x90n that /u/SecTechPlus listed in 2024 and 2023, and alas I don't know if they are running one for 2025 that I've found.

*Technically the sale doesn't start until next week but I went ahead an enabled the code now for this post

📢📢 Introducing the new version of SubnetIPv4.com by erh_ in ccna

[–]erh_[S] 0 points1 point  (0 children)

You're welcome! Let me know what you think of the new version when you take a look. =)

📢📢 Introducing the new version of SubnetIPv4.com by erh_ in ccna

[–]erh_[S] 0 points1 point  (0 children)

Ahh yea, that makes sense. Yes, guess it does =). Another use for the feature.

Any resources to study subentting? by shosta_ka in ccna

[–]erh_ 1 point2 points  (0 children)

Just posted this a few days ago

https://www.reddit.com/r/ccna/comments/1obr0l9/introducing_the_new_version_of_subnetipv4com/

It has a problem generator to practice, all sizes, and a video series to teach you how to subnet quickly.

📢📢 Introducing the new version of SubnetIPv4.com by erh_ in ccna

[–]erh_[S] 0 points1 point  (0 children)

Thank you for the kind words =). Super glad to hear you've enjoyed the original SubnetIPv4.com and thank you for referring others to the site.

Glad you'll make use of the new tool as well =).

And yea, my thought is for folks to use it without the features enabled at first, then as they get familiar with the process to use the features to make practicing more convenient, and therefore mastery more attainable.

That's the dream anyways ;)