ZyXEL P-2002 User Guide - Page 52

Port Restricted Cone NAT, 3.2.4, Symmetric NAT

Get ZyXEL P-2002 PDF manuals and user guides View all ZyXEL P-2002 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 52 highlights

P-2002 Series User's Guide 5.3.2.3 Port Restricted Cone NAT As in full cone NAT, a port restricted cone NAT router maps all outgoing packets from an internal IP address and port to a single IP address and port on the external network. In the following example, the NAT router maps the source address of all packets sent from internal IP address 1 and port A to IP address 2 and port B on the external network. The difference from full cone and restricted cone NAT is in how the port restricted cone NAT router handles packets coming in from the external network. A host on the external network (IP address 3 and Port C for example) can only send packets to the internal host if the internal host has already sent a packet to the external host's IP address and port. A Prestige with IP address 1 and port A sends packets to IP address 3, port C and IP address 4, port D. The NAT router changes the Prestige's IP address to 2 and port to B. Since 1, A has already sent packets to 3, C and 4, D, they can send packets back to 2, B and the NAT router will perform NAT on them and send them to the Prestige at IP address 1, port A. Packets have not been sent from 1, A to 4, E or 5, so they cannot send packets to 1, A. Figure 21 Port Restricted Cone NAT Example 5.3.2.4 Symmetric NAT The full, restricted and port restricted cone NAT types use the same mapping for an outgoing packet's source address regardless of the destination IP address and port. In symmetric NAT, the mapping of an outgoing packet's source address to a source address in another network is different for each different destination IP address and port. In the following example, the NAT router maps the Prestige's source address IP address 1 and port A to IP address 2 and port B on the external network for packets sent to IP address 3 and port B. The NAT router uses a different mapping (IP address 2 and port M) when the Prestige sends packets to IP address 4 and port D. A host on the external network (IP address 3 and port C for example) can only send packets to the internal host via the external IP address and port that the NAT router used in sending a packet to the external host's IP address and port. So in the example, only 3, C is allowed to send packets to 2, B and only 4, D is allowed to send packets to 2, M. 52 Chapter 5 Introduction to VoIP

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
P-2002 Series User’s Guide
52
Chapter 5 Introduction to VoIP
5.3.2.3
Port Restricted Cone NAT
As in full cone NAT, a port restricted cone NAT router maps all outgoing packets from an
internal IP address and port to a single IP address and port on the external network. In the
following example, the NAT router maps the source address of all packets sent from internal
IP address
1
and port
A
to IP address
2
and port
B
on the external network.
The difference from full cone and restricted cone NAT is in how the port restricted cone NAT
router handles packets coming in from the external network. A host on the external network
(IP address
3
and Port
C
for example) can only send packets to the internal host if the internal
host has already sent a packet to the external host’s IP address and port.
A Prestige with IP address
1
and port
A
sends packets to IP address
3
, port
C
and IP address
4
,
port
D
. The NAT router changes the Prestige’s IP address to
2
and port to
B
.
Since
1
,
A
has already sent packets to
3
,
C
and
4
,
D,
they can send packets back to
2
,
B
and the
NAT router will perform NAT on them and send them to the Prestige at IP address
1
, port
A
.
Packets have not been sent from
1
,
A
to
4
,
E
or
5
, so they cannot send packets to
1
,
A
.
Figure 21
Port Restricted Cone NAT Example
5.3.2.4
Symmetric NAT
The full, restricted and port restricted cone NAT types use the same mapping for an outgoing
packet’s source address regardless of the destination IP address and port. In symmetric NAT,
the mapping of an outgoing packet’s source address to a source address in another network is
different for each different destination IP address and port.
In the following example, the NAT router maps the Prestige’s source address IP address
1
and
port
A
to IP address
2
and port
B
on the external network for packets sent to IP address
3
and
port
B
. The NAT router uses a different mapping (IP address
2
and port
M
) when the Prestige
sends packets to IP address
4
and port
D
.
A host on the external network (IP address
3
and port
C
for example) can only send packets to
the internal host via the external IP address and port that the NAT router used in sending a
packet to the external host’s IP address and port. So in the example, only
3, C
is allowed to
send packets to
2, B
and only
4, D
is allowed to send packets to
2, M
.