When a TLOC is configured behind NAT, the color type is assigned as public. This is because the TLOC is not accessible from the public internet, so it must use a public IP address to communicate with other TLOCs. The other color types, MPLS, private, and blue, are used for TLOCs that are accessible from the public internet.