{"id":30844,"date":"2025-10-14T10:49:47","date_gmt":"2025-10-14T03:49:47","guid":{"rendered":"https:\/\/interdata.vn\/blog\/?p=30844"},"modified":"2025-10-14T13:41:27","modified_gmt":"2025-10-14T06:41:27","slug":"nat-la-gi","status":"publish","type":"post","link":"https:\/\/interdata.vn\/blog\/nat-la-gi\/","title":{"rendered":"NAT l\u00e0 g\u00ec? C\u00e1ch ho\u1ea1t \u0111\u1ed9ng, c\u00e1c lo\u1ea1i NAT v\u00e0 \u1ee9ng d\u1ee5ng th\u1ef1c t\u1ebf"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-white ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">N\u1ed8I DUNG<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 eztoc-toggle-hide-by-default' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#NAT-la-gi\" >NAT l\u00e0 g\u00ec?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#NAT-hoat-dong-nhu-the-nao\" >NAT ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#Phan-loai-cac-NAT-pho-bien\" >Ph\u00e2n lo\u1ea1i c\u00e1c NAT ph\u1ed5 bi\u1ebfn?<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#Static-NAT\" >Static NAT<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#Dynamic-NAT\" >Dynamic NAT<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#NAT-Overload-PAT\" >NAT Overload (PAT)<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#Muc-dich-va-vai-tro-cua-NAT-trong-mang-may-tinh\" >M\u1ee5c \u0111\u00edch v\u00e0 vai tr\u00f2 c\u1ee7a NAT trong m\u1ea1ng m\u00e1y t\u00ednh<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#Uu-va-nhuoc-diem-cua-NAT\" >\u01afu v\u00e0 nh\u01b0\u1ee3c \u0111i\u1ec3m c\u1ee7a NAT<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#Uu-diem-noi-bat-cua-NAT\" >\u01afu \u0111i\u1ec3m n\u1ed5i b\u1eadt c\u1ee7a NAT:<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#Nhuoc-diem-cua-NAT\" >Nh\u01b0\u1ee3c \u0111i\u1ec3m c\u1ee7a NAT<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#NAT-khac-gi-voi-VPN-hay-Proxy\" >NAT kh\u00e1c g\u00ec v\u1edbi VPN hay Proxy?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#NAT-va-moi-quan-he-voi-cac-cong-nghe-mang-khac\" >NAT v\u00e0 m\u1ed1i quan h\u1ec7 v\u1edbi c\u00e1c c\u00f4ng ngh\u1ec7 m\u1ea1ng kh\u00e1c<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#NAT-vs-Firewall\" >NAT vs Firewall<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#NAT-va-Router\" >NAT v\u00e0 Router<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#NAT-trong-IPv6\" >NAT trong IPv6<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#NAT-duoc-ung-dung-nhu-the-nao\" >NAT \u0111\u01b0\u1ee3c \u1ee9ng d\u1ee5ng nh\u01b0 th\u1ebf n\u00e0o?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#Cach-cau-hinh-NAT-co-ban\" >C\u00e1ch c\u1ea5u h\u00ecnh NAT c\u01a1 b\u1ea3n<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#Cau-hoi-thuong-gap-ve-NAT\" >C\u00e2u h\u1ecfi th\u01b0\u1eddng g\u1eb7p v\u1ec1 NAT<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#Tai-sao-phai-dung-NAT\" >T\u1ea1i sao ph\u1ea3i d\u00f9ng NAT?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#NAT-co-anh-huong-den-toc-do-mang-khong\" >NAT c\u00f3 \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn t\u1ed1c \u0111\u1ed9 m\u1ea1ng kh\u00f4ng?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#NAT-Type-la-gi-Tai-sao-game-thu-quan-tam-den-no\" >NAT Type l\u00e0 g\u00ec? T\u1ea1i sao game th\u1ee7 quan t\u00e2m \u0111\u1ebfn n\u00f3?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#NAT-co-phai-la-Firewall-khong\" >NAT c\u00f3 ph\u1ea3i l\u00e0 Firewall kh\u00f4ng?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/#IPv6-co-can-NAT-khong\" >IPv6 c\u00f3 c\u1ea7n NAT kh\u00f4ng?<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<p>B\u1ea1n c\u00f3 bao gi\u1edd th\u1eafc m\u1eafc t\u1ea1i sao h\u00e0ng ch\u1ee5c thi\u1ebft b\u1ecb trong nh\u00e0 b\u1ea1n (\u0111i\u1ec7n tho\u1ea1i, laptop, TV th\u00f4ng minh) l\u1ea1i c\u00f3 th\u1ec3 c\u00f9ng l\u00fac truy c\u1eadp <a href=\"https:\/\/interdata.vn\/blog\/mang-internet\/\">Internet<\/a>, d\u00f9 nh\u00e0 m\u1ea1ng ch\u1ec9 c\u1ea5p cho b\u1ea1n m\u1ed9t <a href=\"https:\/\/interdata.vn\/blog\/dia-chi-ip-la-gi\/\">\u0111\u1ecba ch\u1ec9 IP<\/a> duy nh\u1ea5t? B\u00ed m\u1eadt n\u1eb1m \u1edf m\u1ed9t k\u1ef9 thu\u1eadt m\u1ea1ng c\u1ed1t l\u00f5i: NAT. B\u00e0i vi\u1ebft n\u00e0y s\u1ebd gi\u1ea3i th\u00edch to\u00e0n di\u1ec7n <a href=\"https:\/\/interdata.vn\/blog\/nat-la-gi\/\">NAT l\u00e0 g\u00ec<\/a>, c\u00e1ch ho\u1ea1t \u0111\u1ed9ng, c\u00e1c lo\u1ea1i h\u00ecnh, \u01b0u\/nh\u01b0\u1ee3c \u0111i\u1ec3m v\u00e0 \u1ee9ng d\u1ee5ng th\u1ef1c t\u1ebf c\u1ee7a NAT.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"NAT-la-gi\"><\/span>NAT l\u00e0 g\u00ec?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><strong>NAT (Network Address Translation)<\/strong>, hay c\u00f2n g\u1ecdi l\u00e0 D\u1ecbch \u0111\u1ecba ch\u1ec9 M\u1ea1ng, l\u00e0 m\u1ed9t ph\u01b0\u01a1ng ph\u00e1p cho ph\u00e9p m\u1ed9t thi\u1ebft b\u1ecb duy nh\u1ea5t (th\u01b0\u1eddng l\u00e0 Router ho\u1eb7c Firewall) \u0111\u1ea1i di\u1ec7n cho to\u00e0n b\u1ed9 m\u1ed9t m\u1ea1ng m\u00e1y t\u00ednh (m\u1ea1ng n\u1ed9i b\u1ed9 &#8211; LAN) \u0111\u1ec3 giao ti\u1ebfp v\u1edbi m\u1ea1ng b\u00ean ngo\u00e0i (Internet).<\/p>\n<p>C\u1ee5 th\u1ec3, NAT\u00a0 ho\u1ea1t \u0111\u1ed9ng nh\u01b0 m\u1ed9t phi\u00ean d\u1ecbch vi\u00ean. Khi m\u1ed9t thi\u1ebft b\u1ecb trong m\u1ea1ng n\u1ed9i b\u1ed9 g\u1eedi d\u1eef li\u1ec7u ra ngo\u00e0i, NAT s\u1ebd thay th\u1ebf \u0111\u1ecba ch\u1ec9 IP ri\u00eang (Private IP) c\u1ee7a thi\u1ebft b\u1ecb \u0111\u00f3 b\u1eb1ng \u0111\u1ecba ch\u1ec9 IP c\u00f4ng c\u1ed9ng (Public IP) duy nh\u1ea5t \u0111\u01b0\u1ee3c nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 Internet (ISP) c\u1ea5p. Qu\u00e1 tr\u00ecnh d\u1ecbch \u0111\u1ecba ch\u1ec9 n\u00e0y di\u1ec5n ra li\u00ean t\u1ee5c, \u0111\u1ea3m b\u1ea3o m\u1ecdi d\u1eef li\u1ec7u g\u1eedi \u0111i v\u00e0 nh\u1eadn v\u1ec1 \u0111\u1ec1u \u0111\u01b0\u1ee3c chuy\u1ec3n \u0111\u00fang thi\u1ebft b\u1ecb.<\/p>\n<p>Kh\u00e1i ni\u1ec7m NAT l\u00e0 g\u00ec tr\u1edf n\u00ean c\u1ef1c k\u1ef3 quan tr\u1ecdng do s\u1ef1 c\u1ea1n ki\u1ec7t c\u1ee7a \u0111\u1ecba ch\u1ec9 <a href=\"https:\/\/interdata.vn\/blog\/ipv4-la-gi\/\">IPv4<\/a>. N\u1ebfu kh\u00f4ng c\u00f3 NAT, m\u1ed7i thi\u1ebft b\u1ecb k\u1ebft n\u1ed1i Internet \u0111\u1ec1u c\u1ea7n m\u1ed9t \u0111\u1ecba ch\u1ec9 IP c\u00f4ng c\u1ed9ng duy nh\u1ea5t, \u0111i\u1ec1u n\u00e0y l\u00e0 kh\u00f4ng th\u1ec3.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-30854\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/06\/NAT.jpg\" alt=\"NAT\" width=\"600\" height=\"400\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/06\/NAT.jpg 600w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/06\/NAT-300x200.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<h2><span class=\"ez-toc-section\" id=\"NAT-hoat-dong-nhu-the-nao\"><\/span>NAT ho\u1ea1t \u0111\u1ed9ng nh\u01b0 th\u1ebf n\u00e0o?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Nguy\u00ean l\u00fd ho\u1ea1t \u0111\u1ed9ng c\u1ee7a NAT d\u1ef1a tr\u00ean m\u1ed9t quy tr\u00ecnh ghi nh\u1edb v\u00e0 thay th\u1ebf \u0111\u1ecba ch\u1ec9 m\u1ed9t c\u00e1ch th\u00f4ng minh. Qu\u00e1 tr\u00ecnh n\u00e0y di\u1ec5n ra c\u1ef1c nhanh v\u00e0 ho\u00e0n to\u00e0n t\u1ef1 \u0111\u1ed9ng trong router c\u1ee7a b\u1ea1n.<\/p>\n<p>Khi m\u00e1y t\u00ednh c\u1ee7a b\u1ea1n (v\u00ed d\u1ee5 c\u00f3 IP n\u1ed9i b\u1ed9 l\u00e0 <code>192.168.1.100<\/code>) g\u1eedi m\u1ed9t y\u00eau c\u1ea7u truy c\u1eadp <a href=\"https:\/\/interdata.vn\/blog\/website-la-gi\/\">website<\/a> InterData, g\u00f3i tin s\u1ebd \u0111i \u0111\u1ebfn router. Router s\u1ebd tra c\u1ee9u m\u1ed9t b\u1ea3ng g\u1ecdi l\u00e0 <strong>B\u1ea3ng NAT (NAT Table)<\/strong>. T\u1ea1i \u0111\u00e2y, router thay th\u1ebf \u0111\u1ecba ch\u1ec9 IP ngu\u1ed3n <code>192.168.1.100<\/code> b\u1eb1ng \u0111\u1ecba ch\u1ec9 IP c\u00f4ng c\u1ed9ng c\u1ee7a nh\u00e0 m\u1ea1ng c\u1ea5p cho b\u1ea1n, \u0111\u1ed3ng th\u1eddi ghi l\u1ea1i \u00e1nh x\u1ea1 n\u00e0y v\u00e0o b\u1ea3ng.<\/p>\n<p>Khi <a href=\"https:\/\/interdata.vn\/blog\/may-chu-server-la-gi\/\">m\u00e1y ch\u1ee7<\/a> c\u1ee7a InterData g\u1eedi d\u1eef li\u1ec7u ph\u1ea3n h\u1ed3i, d\u1eef li\u1ec7u s\u1ebd quay tr\u1edf l\u1ea1i \u0111\u1ecba ch\u1ec9 IP c\u00f4ng c\u1ed9ng c\u1ee7a router. Router nh\u1eadn \u0111\u01b0\u1ee3c g\u00f3i tin, tra c\u1ee9u l\u1ea1i B\u1ea3ng NAT \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh y\u00eau c\u1ea7u n\u00e0y xu\u1ea5t ph\u00e1t t\u1eeb m\u00e1y t\u00ednh <code>192.168.1.100<\/code>. Sau \u0111\u00f3, router chuy\u1ec3n ti\u1ebfp ch\u00ednh x\u00e1c g\u00f3i tin v\u1ec1 m\u00e1y t\u00ednh c\u1ee7a b\u1ea1n.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Phan-loai-cac-NAT-pho-bien\"><\/span>Ph\u00e2n lo\u1ea1i c\u00e1c NAT ph\u1ed5 bi\u1ebfn?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>NAT \u0111\u01b0\u1ee3c chia th\u00e0nh nhi\u1ec1u lo\u1ea1i \u0111\u1ec3 ph\u1ee5c v\u1ee5 c\u00e1c m\u1ee5c \u0111\u00edch kh\u00e1c nhau. Ba lo\u1ea1i ph\u1ed5 bi\u1ebfn nh\u1ea5t m\u00e0 b\u1ea1n s\u1ebd g\u1eb7p l\u00e0 Static NAT, Dynamic NAT, v\u00e0 NAT Overload (hay c\u00f2n g\u1ecdi l\u00e0 PAT).<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-30850\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/06\/NAT-01.jpg\" alt=\"NAT\" width=\"600\" height=\"400\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/06\/NAT-01.jpg 600w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/06\/NAT-01-300x200.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Static-NAT\"><\/span>Static NAT<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Static NAT thi\u1ebft l\u1eadp m\u1ed9t m\u1ed1i quan h\u1ec7 \u00e1nh x\u1ea1 m\u1ed9t-m\u1ed9t (1:1) c\u1ed1 \u0111\u1ecbnh. \u0110i\u1ec1u n\u00e0y c\u00f3 ngh\u0129a l\u00e0 m\u1ed7i m\u1ed9t \u0111\u1ecba ch\u1ec9 IP n\u1ed9i b\u1ed9 s\u1ebd \u0111\u01b0\u1ee3c \u00e1nh x\u1ea1 t\u1edbi m\u1ed9t \u0111\u1ecba ch\u1ec9 IP c\u00f4ng c\u1ed9ng c\u1ee5 th\u1ec3 v\u00e0 kh\u00f4ng thay \u0111\u1ed5i.<\/p>\n<p>C\u01a1 ch\u1ebf n\u00e0y r\u1ea5t h\u1eefu \u00edch khi b\u1ea1n c\u00f3 m\u1ed9t m\u00e1y ch\u1ee7 b\u00ean trong m\u1ea1ng LAN (v\u00ed d\u1ee5 nh\u01b0 <a href=\"https:\/\/interdata.vn\/blog\/web-server\/\">m\u00e1y ch\u1ee7 web<\/a> ho\u1eb7c camera an ninh) m\u00e0 c\u1ea7n \u0111\u01b0\u1ee3c truy c\u1eadp t\u1eeb Internet. Nh\u1edd c\u00f3 Static NAT, ng\u01b0\u1eddi d\u00f9ng b\u00ean ngo\u00e0i lu\u00f4n c\u00f3 th\u1ec3 t\u00ecm \u0111\u1ebfn \u0111\u00fang \u0111\u1ecba ch\u1ec9 IP c\u00f4ng c\u1ed9ng \u0111\u00e3 \u0111\u01b0\u1ee3c ch\u1ec9 \u0111\u1ecbnh \u0111\u1ec3 k\u1ebft n\u1ed1i.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Dynamic-NAT\"><\/span>Dynamic NAT<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Kh\u00f4ng gi\u1ed1ng nh\u01b0 Static NAT, Dynamic NAT \u00e1nh x\u1ea1 m\u1ed9t \u0111\u1ecba ch\u1ec9 IP n\u1ed9i b\u1ed9 v\u1edbi m\u1ed9t \u0111\u1ecba ch\u1ec9 IP c\u00f4ng c\u1ed9ng t\u1eeb m\u1ed9t nh\u00f3m (pool) c\u00e1c \u0111\u1ecba ch\u1ec9 c\u00f3 s\u1eb5n. \u0110\u1ecba ch\u1ec9 c\u00f4ng c\u1ed9ng n\u00e0y kh\u00f4ng c\u1ed1 \u0111\u1ecbnh m\u00e0 \u0111\u01b0\u1ee3c c\u1ea5p ph\u00e1t \u0111\u1ed9ng cho thi\u1ebft b\u1ecb n\u00e0o c\u00f3 nhu c\u1ea7u k\u1ebft n\u1ed1i ra ngo\u00e0i tr\u01b0\u1edbc.<\/p>\n<p>Khi phi\u00ean k\u1ebft n\u1ed1i k\u1ebft th\u00fac, \u0111\u1ecba ch\u1ec9 IP c\u00f4ng c\u1ed9ng \u0111\u00f3 \u0111\u01b0\u1ee3c tr\u1ea3 v\u1ec1 nh\u00f3m \u0111\u1ec3 thi\u1ebft b\u1ecb kh\u00e1c c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng. Ph\u01b0\u01a1ng ph\u00e1p n\u00e0y mang l\u1ea1i s\u1ef1 linh ho\u1ea1t nh\u01b0ng s\u1ed1 l\u01b0\u1ee3ng thi\u1ebft b\u1ecb c\u00f3 th\u1ec3 k\u1ebft n\u1ed1i \u0111\u1ed3ng th\u1eddi b\u1ecb gi\u1edbi h\u1ea1n b\u1edfi s\u1ed1 l\u01b0\u1ee3ng IP c\u00f3 trong nh\u00f3m.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"NAT-Overload-PAT\"><\/span>NAT Overload (PAT)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>\u0110\u00e2y l\u00e0 lo\u1ea1i NAT ph\u1ed5 bi\u1ebfn nh\u1ea5t, \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong h\u1ea7u h\u1ebft c\u00e1c router gia \u0111\u00ecnh v\u00e0 v\u0103n ph\u00f2ng nh\u1ecf. T\u00ean g\u1ecdi kh\u00e1c c\u1ee7a ph\u01b0\u01a1ng ph\u00e1p n\u00e0y l\u00e0 <strong>PAT (Port Address Translation)<\/strong>. C\u01a1 ch\u1ebf n\u00e0y cho ph\u00e9p h\u00e0ng tr\u0103m thi\u1ebft b\u1ecb trong m\u1ea1ng n\u1ed9i b\u1ed9 c\u00f9ng chia s\u1ebb m\u1ed9t \u0111\u1ecba ch\u1ec9 IP c\u00f4ng c\u1ed9ng duy nh\u1ea5t.<\/p>\n<p>PAT th\u1ef1c hi\u1ec7n \u0111i\u1ec1u n\u00e0y b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng c\u00e1c s\u1ed1 hi\u1ec7u c\u1ed5ng (port) kh\u00e1c nhau \u0111\u1ec3 ph\u00e2n bi\u1ec7t c\u00e1c k\u1ebft n\u1ed1i. H\u00e3y ngh\u0129 v\u1ec1 \u0111\u1ecba ch\u1ec9 IP c\u00f4ng c\u1ed9ng nh\u01b0 \u0111\u1ecba ch\u1ec9 m\u1ed9t t\u00f2a chung c\u01b0, c\u00f2n m\u1ed7i port l\u00e0 s\u1ed1 c\u1ee7a m\u1ed9t c\u0103n h\u1ed9. D\u00f9 c\u00f9ng m\u1ed9t \u0111\u1ecba ch\u1ec9 t\u00f2a nh\u00e0, th\u01b0 t\u1eeb v\u1eabn \u0111\u01b0\u1ee3c g\u1eedi \u0111\u1ebfn \u0111\u00fang t\u1eebng c\u0103n h\u1ed9 nh\u1edd s\u1ed1 ph\u00f2ng.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Muc-dich-va-vai-tro-cua-NAT-trong-mang-may-tinh\"><\/span>M\u1ee5c \u0111\u00edch v\u00e0 vai tr\u00f2 c\u1ee7a NAT trong m\u1ea1ng m\u00e1y t\u00ednh<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Vi\u1ec7c tri\u1ec3n khai <strong>NAT trong m\u1ea1ng<\/strong>\u00a0v\u00e0 n\u00f3 ph\u1ee5c v\u1ee5 m\u1ee5c \u0111\u00edch g\u00ec? N\u1ebfu \u0111i s\u00e2u h\u01a1n, b\u1ea1n s\u1ebd th\u1ea5y ch\u1ee9c n\u0103ng <strong>NAT<\/strong> v\u01b0\u1ee3t ra ngo\u00e0i ph\u1ea1m vi ti\u1ebft ki\u1ec7m IP \u0111\u01a1n thu\u1ea7n, m\u00e0 c\u00f2n li\u00ean quan \u0111\u1ebfn v\u1ea5n \u0111\u1ec1 ki\u1ebfn tr\u00fac m\u1ea1ng v\u00e0 b\u1ea3o m\u1eadt.<\/p>\n<p>Tr\u1edf l\u1ea1i th\u1eddi k\u1ef3 \u0111\u1ea7u c\u1ee7a Internet, IPv4 \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf v\u1edbi gi\u1ea3 \u0111\u1ecbnh r\u1eb1ng m\u1ecdi thi\u1ebft b\u1ecb \u0111\u1ec1u c\u1ea7n m\u1ed9t IP c\u00f4ng c\u1ed9ng. Khi Internet b\u00f9ng n\u1ed5, vi\u1ec7c <strong>ti\u1ebft ki\u1ec7m IP<\/strong> tr\u1edf th\u00e0nh \u01b0u ti\u00ean h\u00e0ng \u0111\u1ea7u, v\u00e0 <strong>NAT<\/strong>\u00a0ch\u00ednh l\u00e0 gi\u1ea3i ph\u00e1p t\u1ea1m th\u1eddi nh\u01b0ng hi\u1ec7u qu\u1ea3 nh\u1ea5t cho v\u1ea5n \u0111\u1ec1 n\u00e0y.<\/p>\n<p><strong>T\u1ea1i sao NAT quan tr\u1ecdng:<\/strong><\/p>\n<ul>\n<li><strong>Ti\u1ebft ki\u1ec7m 30\u221270% \u0110\u1ecba ch\u1ec9 IPv4:<\/strong> N\u1ebfu kh\u00f4ng c\u00f3 NAT, th\u1ebf gi\u1edbi \u0111\u00e3 kh\u00f4ng c\u00f2n \u0111\u1ecba ch\u1ec9 IPv4 t\u1eeb r\u1ea5t l\u00e2u.<\/li>\n<li><strong>T\u0103ng c\u01b0\u1eddng an ninh m\u1ea1ng (Security):<\/strong> <strong>NAT c\u00f3 t\u00e1c d\u1ee5ng g\u00ec<\/strong> l\u1edbn trong b\u1ea3o m\u1eadt? N\u00f3 t\u1ea1o ra m\u1ed9t l\u1edbp b\u1ea3o v\u1ec7 c\u01a1 b\u1ea3n, ng\u0103n ch\u1eb7n c\u00e1c m\u00e1y ch\u1ee7 b\u00ean ngo\u00e0i truy c\u1eadp tr\u1ef1c ti\u1ebfp v\u00e0o c\u00e1c m\u00e1y t\u00ednh n\u1ed9i b\u1ed9, v\u00ec ch\u00fang kh\u00f4ng bi\u1ebft \u0111\u1ecba ch\u1ec9 IP th\u1eadt b\u00ean trong.<\/li>\n<li><strong>Qu\u1ea3n l\u00fd m\u1ea1ng n\u1ed9i b\u1ed9 d\u1ec5 d\u00e0ng h\u01a1n:<\/strong> <strong>NAT trong m\u1ea1ng LAN<\/strong> cho ph\u00e9p qu\u1ea3n tr\u1ecb vi\u00ean t\u1ef1 do g\u00e1n IP ri\u00eang (v\u00ed d\u1ee5: 192.168.x.x) cho c\u00e1c thi\u1ebft b\u1ecb n\u1ed9i b\u1ed9 m\u00e0 kh\u00f4ng c\u1ea7n ph\u1ea3i lo l\u1eafng v\u1ec1 vi\u1ec7c tr\u00f9ng l\u1eb7p IP v\u1edbi c\u00e1c m\u1ea1ng kh\u00e1c tr\u00ean to\u00e0n c\u1ea7u.<\/li>\n<\/ul>\n<p>Hi\u1ec3u \u0111\u01b0\u1ee3c <strong>m\u1ee5c \u0111\u00edch c\u1ee7a NAT<\/strong> n\u00e0y s\u1ebd gi\u00fap c\u00e1c k\u1ef9 thu\u1eadt vi\u00ean m\u1ea1ng m\u1edbi d\u1ec5 d\u00e0ng h\u01a1n trong vi\u1ec7c c\u1ea5u h\u00ecnh Router v\u00e0 kh\u1eafc ph\u1ee5c l\u1ed7i.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Uu-va-nhuoc-diem-cua-NAT\"><\/span>\u01afu v\u00e0 nh\u01b0\u1ee3c \u0111i\u1ec3m c\u1ee7a NAT<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>M\u1eb7c d\u00f9 <strong>NAT<\/strong> c\u00f3 vai tr\u00f2 kh\u00f4ng th\u1ec3 thay th\u1ebf, c\u00f4ng ngh\u1ec7 n\u00e0y v\u1eabn t\u1ed3n t\u1ea1i nh\u1eefng \u01b0u \u0111i\u1ec3m v\u00e0 h\u1ea1n ch\u1ebf nh\u1ea5t \u0111\u1ecbnh m\u00e0 ng\u01b0\u1eddi d\u00f9ng c\u1ea7n nh\u1eadn bi\u1ebft.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Uu-diem-noi-bat-cua-NAT\"><\/span>\u01afu \u0111i\u1ec3m n\u1ed5i b\u1eadt c\u1ee7a NAT:<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ol>\n<li><strong>Ti\u1ebft ki\u1ec7m \u0110\u1ecba ch\u1ec9 IP:<\/strong> L\u1ee3i \u00edch r\u00f5 r\u00e0ng nh\u1ea5t, \u0111\u1eb7c bi\u1ec7t quan tr\u1ecdng trong b\u1ed1i c\u1ea3nh c\u1ea1n ki\u1ec7t IP.<\/li>\n<li><strong>T\u0103ng c\u01b0\u1eddng B\u1ea3o m\u1eadt:<\/strong> Vi\u1ec7c \u1ea9n IP n\u1ed9i b\u1ed9 gi\u00fap gi\u1ea3m thi\u1ec3u r\u1ee7i ro t\u1eeb c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng qu\u00e9t c\u1ed5ng (Port Scanning) t\u1eeb b\u00ean ngo\u00e0i.<\/li>\n<li><strong>Qu\u1ea3n l\u00fd m\u1ea1ng n\u1ed9i b\u1ed9 \u0111\u01a1n gi\u1ea3n:<\/strong> Gi\u00fap d\u1ec5 d\u00e0ng thay \u0111\u1ed5i c\u1ea5u tr\u00fac IP n\u1ed9i b\u1ed9 m\u00e0 kh\u00f4ng \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn k\u1ebft n\u1ed1i Internet.<\/li>\n<\/ol>\n<h3><span class=\"ez-toc-section\" id=\"Nhuoc-diem-cua-NAT\"><\/span>Nh\u01b0\u1ee3c \u0111i\u1ec3m c\u1ee7a NAT<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<ol>\n<li><strong>L\u00e0m ch\u1eadm k\u1ebft n\u1ed1i (Performance Overhead):<\/strong> Qu\u00e1 tr\u00ecnh d\u1ecbch \u0111\u1ecba ch\u1ec9 v\u00e0 ki\u1ec3m tra <strong>B\u1ea3ng NAT<\/strong> t\u1ed1n m\u1ed9t ch\u00fat th\u1eddi gian x\u1eed l\u00fd c\u1ee7a Router (d\u00f9 r\u1ea5t nh\u1ecf, ch\u1ec9 v\u00e0i mili gi\u00e2y).<\/li>\n<li><strong>Kh\u00f3 kh\u0103n trong k\u1ebft n\u1ed1i <a href=\"https:\/\/interdata.vn\/blog\/peer-to-peer-la-gi\/\">P2P<\/a> (Peer-to-Peer):<\/strong> \u0110\u00e2y l\u00e0 <strong>nh\u01b0\u1ee3c \u0111i\u1ec3m NAT<\/strong> l\u1edbn nh\u1ea5t. C\u00e1c \u1ee9ng d\u1ee5ng P2P nh\u01b0 game online, VoIP (Voice over IP) ho\u1eb7c c\u00e1c ph\u1ea7n m\u1ec1m chia s\u1ebb t\u1eadp tin th\u01b0\u1eddng g\u1eb7p kh\u00f3 kh\u0103n v\u00ec b\u00ean ngo\u00e0i kh\u00f4ng th\u1ec3 kh\u1edfi t\u1ea1o k\u1ebft n\u1ed1i tr\u1ef1c ti\u1ebfp \u0111\u1ebfn IP n\u1ed9i b\u1ed9.<\/li>\n<li><strong>G\u00e2y l\u1ed7i cho m\u1ed9t s\u1ed1 giao th\u1ee9c:<\/strong> C\u00e1c giao th\u1ee9c kh\u00f4ng c\u00f3 tr\u01b0\u1eddng IP v\u00e0 Port trong g\u00f3i tin (v\u00ed d\u1ee5: m\u1ed9t s\u1ed1 lo\u1ea1i VPN ho\u1eb7c VoIP ph\u1ee9c t\u1ea1p) c\u00f3 th\u1ec3 b\u1ecb l\u1ed7i khi \u0111i qua NAT.<\/li>\n<\/ol>\n<h2><span class=\"ez-toc-section\" id=\"NAT-khac-gi-voi-VPN-hay-Proxy\"><\/span>NAT kh\u00e1c g\u00ec v\u1edbi VPN hay Proxy?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Nhi\u1ec1u ng\u01b0\u1eddi th\u01b0\u1eddng nh\u1ea7m l\u1eabn gi\u1eefa NAT, VPN, v\u00e0 Proxy v\u00ec ch\u00fang \u0111\u1ec1u li\u00ean quan \u0111\u1ebfn vi\u1ec7c thay \u0111\u1ed5i c\u00e1ch b\u1ea1n k\u1ebft n\u1ed1i Internet. Tuy nhi\u00ean, ch\u00fang ho\u1ea1t \u0111\u1ed9ng \u1edf c\u00e1c t\u1ea7ng kh\u00e1c nhau v\u00e0 ph\u1ee5c v\u1ee5 m\u1ee5c \u0111\u00edch kh\u00e1c nhau.<\/p>\n<table style=\"width: 100%; border-collapse: collapse; border: 1px solid darkgray;\">\n<thead>\n<tr style=\"background-color: blue; color: black;\">\n<th style=\"border: 1px solid darkgray; padding: 8px;\"><span style=\"color: #ffffff;\">Ti\u00eau ch\u00ed<\/span><\/th>\n<th style=\"border: 1px solid darkgray; padding: 8px;\"><span style=\"color: #ffffff;\">NAT (Network Address Translation)<\/span><\/th>\n<th style=\"border: 1px solid darkgray; padding: 8px;\"><span style=\"color: #ffffff;\">VPN (Virtual Private Network)<\/span><\/th>\n<th style=\"border: 1px solid darkgray; padding: 8px;\"><span style=\"color: #ffffff;\"><a href=\"https:\/\/interdata.vn\/blog\/proxy-server-la-gi\/\">Proxy Server<\/a><\/span><\/th>\n<\/tr>\n<\/thead>\n<tbody style=\"background-color: white; color: black;\">\n<tr>\n<td style=\"border: 1px solid darkgray; padding: 8px;\">M\u1ee5c \u0111\u00edch ch\u00ednh<\/td>\n<td style=\"border: 1px solid darkgray; padding: 8px;\">Cho ph\u00e9p nhi\u1ec1u thi\u1ebft b\u1ecb chia s\u1ebb 1 IP c\u00f4ng c\u1ed9ng.<\/td>\n<td style=\"border: 1px solid darkgray; padding: 8px;\">T\u1ea1o m\u1ed9t k\u1ebft n\u1ed1i m\u00e3 h\u00f3a, an to\u00e0n qua Internet.<\/td>\n<td style=\"border: 1px solid darkgray; padding: 8px;\">L\u00e0m trung gian cho c\u00e1c y\u00eau c\u1ea7u web.<\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid darkgray; padding: 8px;\">C\u00e1ch ho\u1ea1t \u0111\u1ed9ng<\/td>\n<td style=\"border: 1px solid darkgray; padding: 8px;\">Ho\u1ea1t \u0111\u1ed9ng \u1edf t\u1ea7ng m\u1ea1ng, thay \u0111\u1ed5i \u0111\u1ecba ch\u1ec9 IP.<\/td>\n<td style=\"border: 1px solid darkgray; padding: 8px;\">T\u1ea1o m\u1ed9t &#8220;\u0111\u01b0\u1eddng h\u1ea7m&#8221; m\u00e3 h\u00f3a to\u00e0n b\u1ed9 l\u01b0u l\u01b0\u1ee3ng.<\/td>\n<td style=\"border: 1px solid darkgray; padding: 8px;\">Ho\u1ea1t \u0111\u1ed9ng \u1edf <a href=\"https:\/\/interdata.vn\/blog\/application-layer-la-gi\/\">t\u1ea7ng \u1ee9ng d\u1ee5ng<\/a>, chuy\u1ec3n ti\u1ebfp y\u00eau c\u1ea7u.<\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid darkgray; padding: 8px;\">B\u1ea3o m\u1eadt<\/td>\n<td style=\"border: 1px solid darkgray; padding: 8px;\">Cung c\u1ea5p b\u1ea3o m\u1eadt c\u01a1 b\u1ea3n b\u1eb1ng c\u00e1ch che gi\u1ea5u IP.<\/td>\n<td style=\"border: 1px solid darkgray; padding: 8px;\">Cung c\u1ea5p b\u1ea3o m\u1eadt cao nh\u1ea5t, m\u00e3 h\u00f3a m\u1ea1nh m\u1ebd.<\/td>\n<td style=\"border: 1px solid darkgray; padding: 8px;\">Th\u01b0\u1eddng kh\u00f4ng m\u00e3 h\u00f3a (tr\u1eeb Proxy <a href=\"https:\/\/interdata.vn\/blog\/giao-thuc-https-la-gi\/\">HTTPS<\/a>).<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2><span class=\"ez-toc-section\" id=\"NAT-va-moi-quan-he-voi-cac-cong-nghe-mang-khac\"><\/span>NAT v\u00e0 m\u1ed1i quan h\u1ec7 v\u1edbi c\u00e1c c\u00f4ng ngh\u1ec7 m\u1ea1ng kh\u00e1c<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u0110\u1ec3 hi\u1ec3u r\u00f5 h\u01a1n <strong>NAT l\u00e0 g\u00ec<\/strong> trong ki\u1ebfn tr\u00fac m\u1ea1ng, c\u1ea7n ph\u1ea3i ph\u00e2n bi\u1ec7t n\u00f3 v\u1edbi c\u00e1c c\u00f4ng ngh\u1ec7 th\u01b0\u1eddng \u0111i k\u00e8m ho\u1eb7c b\u1ecb nh\u1ea7m l\u1eabn.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"NAT-vs-Firewall\"><\/span>NAT vs Firewall<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Nhi\u1ec1u ng\u01b0\u1eddi l\u1ea7m t\u01b0\u1edfng r\u1eb1ng <strong>NAT v\u00e0 Firewall<\/strong> l\u00e0 m\u1ed9t. Tuy nhi\u00ean:<\/p>\n<ul>\n<li><strong>NAT<\/strong> l\u00e0 c\u01a1 ch\u1ebf d\u1ecbch \u0111\u1ecba ch\u1ec9. N\u00f3 kh\u00f4ng \u0111\u01b0a ra quy\u1ebft \u0111\u1ecbnh cho ph\u00e9p hay ch\u1eb7n m\u1ed9t g\u00f3i tin d\u1ef1a tr\u00ean quy t\u1eafc b\u1ea3o m\u1eadt.<\/li>\n<li><strong>Firewall (<a href=\"https:\/\/interdata.vn\/blog\/tuong-lua-firewall\/\">T\u01b0\u1eddng l\u1eeda<\/a>)<\/strong> l\u00e0 c\u01a1 ch\u1ebf ki\u1ec3m so\u00e1t truy c\u1eadp v\u00e0 b\u1ea3o m\u1eadt. N\u00f3 quy\u1ebft \u0111\u1ecbnh g\u00f3i tin n\u00e0o \u0111\u01b0\u1ee3c ph\u00e9p \u0111i qua ho\u1eb7c b\u1ecb ch\u1eb7n, d\u1ef1a tr\u00ean c\u00e1c quy t\u1eafc \u0111\u00e3 c\u1ea5u h\u00ecnh.<\/li>\n<\/ul>\n<p>M\u1eb7c d\u00f9 <strong>NAT c\u00f3 t\u00e1c d\u1ee5ng g\u00ec<\/strong> trong vi\u1ec7c t\u0103ng b\u1ea3o m\u1eadt (b\u1eb1ng c\u00e1ch \u1ea9n IP), n\u00f3 kh\u00f4ng ph\u1ea3i l\u00e0 gi\u1ea3i ph\u00e1p t\u01b0\u1eddng l\u1eeda to\u00e0n di\u1ec7n.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"NAT-va-Router\"><\/span>NAT v\u00e0 Router<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>M\u1ed1i quan h\u1ec7 gi\u1eefa <strong>NAT v\u00e0 Router<\/strong> l\u00e0 m\u1ed1i quan h\u1ec7 t\u00edch h\u1ee3p.<\/p>\n<ul>\n<li><strong>Router<\/strong> l\u00e0 thi\u1ebft b\u1ecb \u0111\u1ecbnh tuy\u1ebfn (Routing) g\u00f3i tin gi\u1eefa c\u00e1c m\u1ea1ng kh\u00e1c nhau.<\/li>\n<li><strong>NAT<\/strong> l\u00e0 m\u1ed9t ch\u1ee9c n\u0103ng (Feature) \u0111\u01b0\u1ee3c t\u00edch h\u1ee3p trong Router.<\/li>\n<\/ul>\n<p>N\u00f3i c\u00e1ch kh\u00e1c, Router c\u1ee7a b\u1ea1n c\u00f3 th\u1ec3 ho\u1ea1t \u0111\u1ed9ng m\u00e0 kh\u00f4ng c\u1ea7n NAT (n\u1ebfu d\u00f9ng IP c\u00f4ng c\u1ed9ng), nh\u01b0ng trong m\u1ea1ng gia \u0111\u00ecnh hi\u1ec7n \u0111\u1ea1i, Router lu\u00f4n \u0111\u01b0\u1ee3c b\u1eadt ch\u1ee9c n\u0103ng PAT \u0111\u1ec3 gi\u1ea3i quy\u1ebft v\u1ea5n \u0111\u1ec1 chia s\u1ebb IP.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"NAT-trong-IPv6\"><\/span>NAT trong IPv6<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>T\u01b0\u01a1ng lai c\u1ee7a giao th\u1ee9c Internet l\u00e0 <strong><a href=\"https:\/\/interdata.vn\/blog\/ipv6-la-gi\/\">IPv6<\/a><\/strong>, n\u01a1i kh\u00f4ng gian \u0111\u1ecba ch\u1ec9 l\u00e0 g\u1ea7n nh\u01b0 v\u00f4 h\u1ea1n. V\u1eady <strong>NAT c\u00f3 c\u1ea7n thi\u1ebft trong IPv6 kh\u00f4ng<\/strong>?<\/p>\n<ul>\n<li>V\u1ec1 m\u1eb7t l\u00fd thuy\u1ebft: <strong>Kh\u00f4ng<\/strong>. IPv6 lo\u1ea1i b\u1ecf nhu c\u1ea7u <strong>ti\u1ebft ki\u1ec7m IP<\/strong> do \u0111\u1ecba ch\u1ec9 c\u00f3 s\u1eb5n cho m\u1ecdi thi\u1ebft b\u1ecb.<\/li>\n<li>V\u1ec1 m\u1eb7t th\u1ef1c t\u1ebf: <strong>C\u00f3 th\u1ec3<\/strong>. D\u00f9 kh\u00f4ng c\u1ea7n thi\u1ebft \u0111\u1ec3 ti\u1ebft ki\u1ec7m \u0111\u1ecba ch\u1ec9, NAT v\u1eabn \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng (v\u00ed d\u1ee5: NPTv6) \u0111\u1ec3 t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt b\u1eb1ng c\u00e1ch duy tr\u00ec s\u1ef1 \u1ea9n danh cho m\u1ea1ng n\u1ed9i b\u1ed9.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"NAT-duoc-ung-dung-nhu-the-nao\"><\/span>NAT \u0111\u01b0\u1ee3c \u1ee9ng d\u1ee5ng nh\u01b0 th\u1ebf n\u00e0o?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>NAT c\u00f3 m\u1eb7t \u1edf kh\u1eafp m\u1ecdi n\u01a1i trong h\u1ea1 t\u1ea7ng Internet hi\u1ec7n \u0111\u1ea1i.<\/p>\n<ul>\n<li><strong>Router gia \u0111\u00ecnh\/v\u0103n ph\u00f2ng:<\/strong> \u0110\u00e2y l\u00e0 \u1ee9ng d\u1ee5ng ph\u1ed5 bi\u1ebfn nh\u1ea5t. M\u1ecdi router WiFi b\u1ea1n \u0111ang s\u1eed d\u1ee5ng \u0111\u1ec1u tri\u1ec3n khai NAT \u0111\u1ec3 c\u1ea5p Internet cho m\u00e1y t\u00ednh, \u0111i\u1ec7n tho\u1ea1i, TV th\u00f4ng minh.<\/li>\n<li><strong>T\u01b0\u1eddng l\u1eeda (Firewall):<\/strong> Trong m\u1ea1ng doanh nghi\u1ec7p, NAT l\u00e0 m\u1ed9t t\u00ednh n\u0103ng kh\u00f4ng th\u1ec3 thi\u1ebfu c\u1ee7a c\u00e1c thi\u1ebft b\u1ecb t\u01b0\u1eddng l\u1eeda \u0111\u1ec3 b\u1ea3o v\u1ec7 v\u00e0 qu\u1ea3n l\u00fd truy c\u1eadp m\u1ea1ng.<\/li>\n<li><strong>N\u1ec1n t\u1ea3ng \u0111\u00e1m m\u00e2y (Cloud\/VPS):<\/strong> C\u00e1c nh\u00e0 cung c\u1ea5p nh\u01b0 Amazon Web Services (AWS) hay Google Cloud s\u1eed d\u1ee5ng NAT Gateway \u0111\u1ec3 cho ph\u00e9p c\u00e1c m\u00e1y ch\u1ee7 \u1ea3o trong m\u1ea1ng ri\u00eang c\u00f3 th\u1ec3 k\u1ebft n\u1ed1i ra Internet \u0111\u1ec3 c\u1eadp nh\u1eadt m\u00e0 kh\u00f4ng b\u1ecb l\u1ed9 \u0111\u1ecba ch\u1ec9 IP ra ngo\u00e0i.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-30851\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/06\/NAT-02.jpg\" alt=\"NAT\" width=\"600\" height=\"400\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/06\/NAT-02.jpg 600w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/06\/NAT-02-300x200.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Cach-cau-hinh-NAT-co-ban\"><\/span>C\u00e1ch c\u1ea5u h\u00ecnh NAT c\u01a1 b\u1ea3n<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>\u0110\u1ed1i v\u1edbi ng\u01b0\u1eddi d\u00f9ng th\u00f4ng th\u01b0\u1eddng, c\u1ea5u h\u00ecnh NAT th\u01b0\u1eddng li\u00ean quan \u0111\u1ebfn <strong>Port Forwarding<\/strong> \u0111\u1ec3 cho ph\u00e9p m\u1ed9t d\u1ecbch v\u1ee5 c\u1ee5 th\u1ec3 (nh\u01b0 game server ho\u1eb7c camera) \u0111\u01b0\u1ee3c truy c\u1eadp t\u1eeb b\u00ean ngo\u00e0i.<\/p>\n<ol>\n<li><strong>Truy c\u1eadp v\u00e0o trang qu\u1ea3n tr\u1ecb router:<\/strong> M\u1edf tr\u00ecnh duy\u1ec7t v\u00e0 nh\u1eadp \u0111\u1ecba ch\u1ec9 IP c\u1ee7a router (th\u01b0\u1eddng l\u00e0 <code>192.168.1.1<\/code> ho\u1eb7c <code>192.168.0.1<\/code>).<\/li>\n<li><strong>\u0110\u0103ng nh\u1eadp:<\/strong> S\u1eed d\u1ee5ng t\u00ean ng\u01b0\u1eddi d\u00f9ng v\u00e0 m\u1eadt kh\u1ea9u \u0111\u01b0\u1ee3c cung c\u1ea5p tr\u00ean th\u00e2n router.<\/li>\n<li><strong>T\u00ecm m\u1ee5c Port Forwarding:<\/strong> M\u1ee5c n\u00e0y c\u00f3 th\u1ec3 n\u1eb1m trong ph\u1ea7n <code>Advanced<\/code>, <code>NAT<\/code>, ho\u1eb7c <code>Virtual Server<\/code>.<\/li>\n<li><strong>T\u1ea1o quy t\u1eafc m\u1edbi:<\/strong> B\u1ea1n s\u1ebd c\u1ea7n \u0111i\u1ec1n c\u00e1c th\u00f4ng tin nh\u01b0 \u0111\u1ecba ch\u1ec9 IP n\u1ed9i b\u1ed9 c\u1ee7a thi\u1ebft b\u1ecb c\u1ea7n m\u1edf port, v\u00e0 c\u00e1c c\u1ed5ng (port) b\u00ean ngo\u00e0i v\u00e0 b\u00ean trong t\u01b0\u01a1ng \u1ee9ng.<\/li>\n<\/ol>\n<p>L\u01b0u \u00fd, vi\u1ec7c m\u1edf port c\u00f3 th\u1ec3 ti\u1ec1m \u1ea9n r\u1ee7i ro b\u1ea3o m\u1eadt n\u1ebfu kh\u00f4ng \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh \u0111\u00fang c\u00e1ch. Lu\u00f4n \u0111\u1ea3m b\u1ea3o b\u1ea1n ch\u1ec9 m\u1edf nh\u1eefng port th\u1ef1c s\u1ef1 c\u1ea7n thi\u1ebft.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-30852\" src=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/06\/NAT-03.jpg\" alt=\"NAT\" width=\"600\" height=\"400\" title=\"\" srcset=\"https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/06\/NAT-03.jpg 600w, https:\/\/interdata.vn\/blog\/wp-content\/uploads\/2025\/06\/NAT-03-300x200.jpg 300w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Cau-hoi-thuong-gap-ve-NAT\"><\/span>C\u00e2u h\u1ecfi th\u01b0\u1eddng g\u1eb7p v\u1ec1 NAT<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"Tai-sao-phai-dung-NAT\"><\/span>T\u1ea1i sao ph\u1ea3i d\u00f9ng NAT?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>L\u00fd do ch\u00ednh l\u00e0 \u0111\u1ec3 gi\u1ea3i quy\u1ebft v\u1ea5n \u0111\u1ec1 c\u1ea1n ki\u1ec7t \u0111\u1ecba ch\u1ec9 IPv4. Theo IANA (T\u1ed5 ch\u1ee9c c\u1ea5p ph\u00e1t s\u1ed1 hi\u1ec7u Internet), c\u00e1c kh\u1ed1i \u0111\u1ecba ch\u1ec9 IPv4 cu\u1ed1i c\u00f9ng \u0111\u00e3 \u0111\u01b0\u1ee3c ph\u00e2n b\u1ed5 h\u1ebft v\u00e0o n\u0103m 2011. NAT cho ph\u00e9p ch\u00fang ta t\u00e1i s\u1eed d\u1ee5ng kh\u00f4ng gian \u0111\u1ecba ch\u1ec9 ri\u00eang m\u1ed9t c\u00e1ch hi\u1ec7u qu\u1ea3.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"NAT-co-anh-huong-den-toc-do-mang-khong\"><\/span>NAT c\u00f3 \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn t\u1ed1c \u0111\u1ed9 m\u1ea1ng kh\u00f4ng?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>C\u00f3, nh\u01b0ng m\u1ee9c \u1ea3nh h\u01b0\u1edfng r\u1ea5t nh\u1ecf v\u00e0 g\u1ea7n nh\u01b0 kh\u00f4ng th\u1ec3 nh\u1eadn th\u1ea5y v\u1edbi c\u00e1c router hi\u1ec7n \u0111\u1ea1i. Qu\u00e1 <a href=\"https:\/\/interdata.vn\/blog\/compiler-trinh-bien-dich-la-gi\/\">tr\u00ecnh bi\u00ean d\u1ecbch<\/a> \u0111\u1ecba ch\u1ec9 g\u00e2y ra m\u1ed9t \u0111\u1ed9 tr\u1ec5 c\u1ef1c nh\u1ecf (microsecond), kh\u00f4ng \u0111\u1ee7 \u0111\u1ec3 \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn tr\u1ea3i nghi\u1ec7m l\u01b0\u1edbt web hay xem phim th\u00f4ng th\u01b0\u1eddng.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"NAT-Type-la-gi-Tai-sao-game-thu-quan-tam-den-no\"><\/span>NAT Type l\u00e0 g\u00ec? T\u1ea1i sao game th\u1ee7 quan t\u00e2m \u0111\u1ebfn n\u00f3?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>NAT Type l\u00e0 c\u00e1ch c\u00e1c m\u00e1y ch\u01a1i game (PlayStation, Xbox) ph\u00e2n lo\u1ea1i m\u1ee9c \u0111\u1ed9 h\u1ea1n ch\u1ebf c\u1ee7a NAT. C\u00f3 3 lo\u1ea1i ch\u00ednh:<\/p>\n<ul>\n<li><strong>Type 1 (Open):<\/strong> \u00cdt h\u1ea1n ch\u1ebf nh\u1ea5t, k\u1ebft n\u1ed1i t\u1ed1t nh\u1ea5t.<\/li>\n<li><strong>Type 2 (Moderate):<\/strong> C\u00f3 m\u1ed9t v\u00e0i h\u1ea1n ch\u1ebf, c\u00f3 th\u1ec3 g\u1eb7p kh\u00f3 kh\u0103n khi k\u1ebft n\u1ed1i v\u1edbi ng\u01b0\u1eddi d\u00f9ng Type 3.<\/li>\n<li><strong>Type 3 (Strict):<\/strong> H\u1ea1n ch\u1ebf nh\u1ea5t, ch\u1ec9 c\u00f3 th\u1ec3 k\u1ebft n\u1ed1i v\u1edbi ng\u01b0\u1eddi d\u00f9ng Type 1, g\u00e2y ra t\u00ecnh tr\u1ea1ng t\u00ecm tr\u1eadn l\u00e2u, kh\u00f4ng th\u1ec3 tham gia party chat.<\/li>\n<\/ul>\n<h3><span class=\"ez-toc-section\" id=\"NAT-co-phai-la-Firewall-khong\"><\/span>NAT c\u00f3 ph\u1ea3i l\u00e0 Firewall kh\u00f4ng?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Kh\u00f4ng. NAT kh\u00f4ng ph\u1ea3i l\u00e0 m\u1ed9t t\u01b0\u1eddng l\u1eeda, nh\u01b0ng ch\u1ee9c n\u0103ng che gi\u1ea5u IP c\u1ee7a NAT cung c\u1ea5p m\u1ed9t l\u1edbp b\u1ea3o v\u1ec7 t\u01b0\u01a1ng t\u1ef1 t\u01b0\u1eddng l\u1eeda. M\u1ed9t t\u01b0\u1eddng l\u1eeda th\u1ef1c s\u1ef1 c\u00f3 c\u00e1c quy t\u1eafc ph\u1ee9c t\u1ea1p h\u01a1n \u0111\u1ec3 l\u1ecdc v\u00e0 ki\u1ec3m so\u00e1t l\u01b0u l\u01b0\u1ee3ng, trong khi NAT ch\u1ec9 \u0111\u01a1n thu\u1ea7n bi\u00ean d\u1ecbch \u0111\u1ecba ch\u1ec9.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"IPv6-co-can-NAT-khong\"><\/span>IPv6 c\u00f3 c\u1ea7n NAT kh\u00f4ng?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>V\u1ec1 l\u00fd thuy\u1ebft, kh\u00f4ng. Kh\u00f4ng gian \u0111\u1ecba ch\u1ec9 c\u1ee7a IPv6 c\u1ef1c k\u1ef3 l\u1edbn (2128 \u0111\u1ecba ch\u1ec9), \u0111\u1ee7 \u0111\u1ec3 c\u1ea5p cho m\u1ed7i thi\u1ebft b\u1ecb tr\u00ean h\u00e0nh tinh m\u1ed9t \u0111\u1ecba ch\u1ec9 c\u00f4ng c\u1ed9ng duy nh\u1ea5t. Do \u0111\u00f3, nhu c\u1ea7u ti\u1ebft ki\u1ec7m \u0111\u1ecba ch\u1ec9 nh\u01b0 IPv4 kh\u00f4ng c\u00f2n n\u1eefa. Tuy nhi\u00ean, NAT v\u1eabn c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng trong IPv6 cho c\u00e1c m\u1ee5c \u0111\u00edch b\u1ea3o m\u1eadt ho\u1eb7c ch\u00ednh s\u00e1ch m\u1ea1ng ri\u00eang.<\/p>\n<p>Hy v\u1ecdng b\u00e0i vi\u1ebft n\u00e0y \u0111\u00e3 gi\u00fap b\u1ea1n hi\u1ec3u r\u00f5 NAT l\u00e0 g\u00ec, NAT c\u00f3 t\u00e1c d\u1ee5ng g\u00ec v\u00e0 c\u01a1 ch\u1ebf ho\u1ea1t \u0111\u1ed9ng c\u1ee7a NAT nh\u01b0 th\u1ebf n\u00e0o. T\u1eeb vi\u1ec7c ti\u1ebft ki\u1ec7m h\u00e0ng t\u1ef7 \u0111\u1ecba ch\u1ec9 IPv4 \u0111\u1ebfn vai tr\u00f2 thi\u1ebft y\u1ebfu trong vi\u1ec7c \u0111\u1ea3m b\u1ea3o b\u1ea3o m\u1eadt c\u01a1 b\u1ea3n cho m\u1ea1ng gia \u0111\u00ecnh, NAT v\u1eabn l\u00e0 m\u1ed9t k\u1ef9 thu\u1eadt n\u1ec1n t\u1ea3ng c\u1ee7a Internet hi\u1ec7n \u0111\u1ea1i.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>B\u1ea1n c\u00f3 bao gi\u1edd th\u1eafc m\u1eafc t\u1ea1i sao h\u00e0ng ch\u1ee5c thi\u1ebft b\u1ecb trong nh\u00e0 b\u1ea1n (\u0111i\u1ec7n tho\u1ea1i, laptop, TV th\u00f4ng minh) l\u1ea1i c\u00f3 th\u1ec3 c\u00f9ng l\u00fac truy c\u1eadp Internet, d\u00f9 nh\u00e0 m\u1ea1ng ch\u1ec9 c\u1ea5p cho b\u1ea1n m\u1ed9t \u0111\u1ecba ch\u1ec9 IP duy nh\u1ea5t? B\u00ed m\u1eadt n\u1eb1m \u1edf m\u1ed9t k\u1ef9 thu\u1eadt m\u1ea1ng c\u1ed1t l\u00f5i: NAT. B\u00e0i vi\u1ebft<\/p>\n","protected":false},"author":2,"featured_media":30854,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[151],"tags":[],"class_list":["post-30844","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-mang"],"_links":{"self":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts\/30844","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/comments?post=30844"}],"version-history":[{"count":4,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts\/30844\/revisions"}],"predecessor-version":[{"id":34534,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/posts\/30844\/revisions\/34534"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/media\/30854"}],"wp:attachment":[{"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/media?parent=30844"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/categories?post=30844"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/interdata.vn\/blog\/wp-json\/wp\/v2\/tags?post=30844"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}