RE: stable addressing

["Fleischman, Eric" <eric.fleischman@boeing.com>]

>Why don't you just deploy proxy servers at the edge of your network?  
>It allows you to talk to the outside using local addresses, while 
>disguising the internal topology as only the proxy servers' addresses 
>are known?

>Much better than deploying v6 NAT.

Pekka,

Thank you for your helpful posting. The use of proxy servers is a good suggestion, since they can also be part of a larger authenticated firewall solution. However, due to the sheer number of the internal devices that need to be exposed in a highly controlled manner (e.g., hundreds if not low-thousands of devices), proxy servers aren't likely to be able to scale to handle the job -- hence the use of authenticated NATs that are associated with the firewall.

--Eric