Cisco Systems ASR 1000 manual No Napt Pinholes, Related Commands

Chapter 9 Topology Hiding

No NAPT Pinholes

Related Commands

•The ipv6 address (session border controller) command sets or creates the IPv6 address prefix on an SBC interface.

•The media-address ipv6 command adds an IPv6 address to the set of addresses that can be used by the DBE as a local media address.

•The media-address pool ipv6 command creates a pool of sequential IPv6 media addresses that can be used by the DBE as local media addresses.

•The port-range (ipv6) command creates a port range associated with a single IPv6 media address or a pool of IPv6 media addresses. IPv6 addresses must be configured with the signaling keyword. The any, voice, video, and fax keywords supported in the IPv4 port-rangecommand are not supported in IPv6.

•The ipv6 {ipv6-address} keyword is added to the debug sbc filter command.

•The ipv6 {ipv6-address} keyword is added to the show sbc dbe media-flow-stats and show sbc dbe signaling-flow-stats commands.

No NAPT Pinholes

No NAPT pinholes can form coupled pairs only under the following circumstances:

•Both pinholes are No NAPT.

•Each “internal termination” has local and remote addresses that are identical to those of the external termination on the associated pinhole.

Note The two terminations between which media loops back are called the “internal terminations” of their respective pinholes. Only external terminations directly receive packets from the network.

•Any remote source address masks (rsams) are duplicated. For example, if a termination with remote address A in one pinhole has an rsam of 1111:2222:3333:4444::/48, then the termination with remote address A in the other pinhole also has an rsam of 1111:2222:3333:4444::/48.

DBE Restrictions

The following are DBE restrictions for the No NAPT Pinholes feature:

•The DBE chooses the internal terminations as follows:

–The first specified termination is chosen to be internal.

–The other termination is chosen accordingly from the other pinhole. If the termination with remote address A on one pinhole is internal, then the termination with local address A on the other pinhole is also internal.

–The DBE does not support choosing internal terminations based on termination names.

•For No NAPT coupled pairs, any Network Address Translation (NAT) latching requests are duplicated. For example, if a termination with remote address A in one pinhole requests NAT latching, then the termination with remote address A in the other pinhole must also request NAT latching. The “request NAT latching” can be done using the ipnapt/latch H.248 signal.

Cisco IOS XE Integrated Session Border Controller Configuration Guide for the Cisco ASR 1000 Series Aggregation Services Routers

OL-15421-01 9-9