Nokia M10 User’s Manual
DRAFT
E Copyright Nokia Telecommunications Oy NTC C33539002SE_A0
6-4
6.4.1 Pinhole
The basic NAPT functionality does not allow access from WAN port to
host in LAN because the private addresses cannot be seen outside the
router. In order to support access from the global Internet to a server in
a private subnet the static NAPT mapping is used. In M10 this
functionality is called pinhole.
In the static mapping the WAN IP address and service related
protocol/destination socket number are mapped to a private IP address
and protocol/destination socket number. This functionality allows
access from WAN interface to only allowed server/services. If two
services, such as HTTP servers in different machines, are located in the
same LAN segment they must have different socket numbers so that
the NAPT can map the address correctly. Only one server on certain
socket number can be used.
6.5 IP address management
IP addresses can be used in two different ways in M10:
DWAN interface belongs to one logical IP subnet and the Ethernet
interface belongs to another logical IP subnet. This is how a
normal router operates.
DWAN port has only one public IP address. The Ethernet interface
uses private IP addressing. Network Address Port Translation
(NAPT) is used to map the private IP addresses to and from a
single public IP address. The operation is analogous to existing
dial-up implementation which consumes only a single IP address
and is the most efficient way to use IP addresses.
The IP address of the WAN interface can be set statically or
dynamically. Dynamic allocation of the IP address using IPCP (IP
control protocol) is possible when PPP over ATM AAL5 is used on an
ADSL WAN link. This operation preferred when NAPT is used. For
bridged WAN encapsulation the DHCP client can be used to retrieve
the IP configuration to the WAN port.
The IP address of the Ethernet interface and the subnet must be set
statically. However, the built-in DHCP server functionality can be
used to allocate an IP address, subnet mask, default gateway and DNS
address to host.