+ this method identifies a connection by using
- private address,
- the public IP address selected for that connection
- external destination IP address
+ an alternative: NAT router has only one public IP address but uses the TCP/UDP port number to identify the connection