3-4 Firmware User Guide

WAN Network

Network Address Translation

LAN Network

 

 

Available for Dynamic NAT

Used for Normal NAT

 

172.16.1.25

172.16.1.26

172.16.1.27

172.16.1.28

 

 

 

172.16.1.29

 

 

 

 

 

 

192.168.1.2

192.168.1.3

192.168.1.4

192.168.1.5

192.168.1.6

192.168.1.7

192.168.1.8

192.168.1.9

192.168.1.10

192.168.1.11

192.168.1.12

192.168.1.13

192.168.1.14

192.168.1.15

192.168.1.16

Exterior addresses are allocated to internal hosts on a demand, or as-needed, basis and then made available when traffic from that host ceases. Once an internal host has been allocated an address, it will use that address for all traffic. Five minutes after all traffic ceases – no pings, all TCP connections closed, no DNS requests, etc. – the address is put at the head of an available list. If an interior host needs an exterior address an hour later, and the previously used address is still available, it will acquire the same address. If an interior host that has not previously been allocated an exterior address needs one, it will be allocated the last, hence the oldest, exterior address on the available list.

All NAT configurations are rule-based. This means that traffic passed through NAT from either the public or the private network is compared to the rules and mappings configured in the Netopia Router in a particular order. The first rule that applies to the traffic being initiated is used.

For example, if a connection is initiated from the public network and is destined for a public IP address configured on the Netopia Router, the following comparisons are made in this order.

1.The Netopia Router first checks its internal NAT cache to see if the data is part of a previously initiated connection, if not…

2.The Netopia Router checks the configured server lists to see if this traffic is intended to be forwarded to an internal host based on the type of service.

3.The Netopia Router then checks to see if there is a static, dynamic, or PAT mapping for the public IP address that the connection is being initiated to.

4.The Netopia Router answers the request itself if the data is destined for the Netopia’s WAN interface IP address. Otherwise the data is discarded.

Page 70
Image 70
Netopia 4000-Series manual WAN Network