Similar to NAT, it maps private host IP addresses onto a single public IP address. Each host is tracked by assigning it a random high TCP port for communications.