Patton electronic SmartNode 4110 Series manual Preserving TCP/UDP port numbers in Napt

SmartWare Software Configuration Guide 11 • NAT/NAPT configuration

Mode: profile napt <pf-name>

Step	Command	Purpose
1	[name] (pf-napt)[pf-name]# tcp-port-	Define the TCP port range
	range <range-start-tcp-port>
	<range-end-tcp-port>
2	[name] (pf-napt)[pf-name]# udp-	Define the UDP port range
	port-range <range-start-udp-
	port> <range-end-udp-port>

Preserving TCP/UDP port numbers in NAPT

The NAPT can be configured to preserve the TCP/UDP port number of outbound packets sent from local hosts towards the global NAPT interface. If this option is enabled the NAPT tries not to change these port numbers. If the port is however already in use, the NAPT will ignore this setting and assign a port number from the configured TCP/UDP port ranges.

Mode: profile napt <pf-name>

Step	Command	Purpose
1	[name] (pf-napt)[pf-name]# [no]	Enable/disable preserving of TCP ports.
	preserve-tcp-ports
2	[name] (pf-napt)[pf-name]# [no]	Enable/disable preserving of UDP ports.
	preserve-udp-ports

Defining the UDP NAPT type

The NAPT type to be applied for UDP packets is configurable using the following procedure. The NAPT sup- ports the UDP translation types shown in the following list. The list is ordered by the security of the NAPT type starting with the highest security type.

•symmetric

•port-restricted-cone

•address-restricted-cone

•full-cone

You find a detailed description of these NAPT types in section 5 of RFC3489. To allow STUN to work through the NAPT the full-cone setting is usually required. The default setting is symmetric.

Mode: profile napt <pf-name>

Step	Command	Purpose
1	[name] (pf-napt)[pf-name]# udp-handling {symmetricaddress-	Define the UDP
	restricted-coneport-restricted-conefull-cone}	translation type

NAT/NAPT configuration task list 138