Advantages Operational simplicity network policies are configured for the whole address block network configuration remains same regardless of the number of customers Works for IPsec communications impossible by multiplexing by TCP/UDP port-number