No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade
Knowledge Base

NAT filter-mode vs NAT mapping-mode on AR12200

Publication Date:  2017-03-01  |   Views:  772  |   Downloads:  0  |   Author:  SU1002255490  |   Document ID:  EKB1000531520

Contents

Issue Description

What is the difference between NAT filter-mode vs NAT mapping-mode?

Solution

NAT filtering allows an NAT device to filter the traffic from a public network to a private network.

NAT mapping enables the IP addresses of group of hosts on a private network to be mapped to the same public IP address using the NAT table.

If the NAT filtering mode is set to endpoint-independent: nat filter-mode endpoint-independent, the system uses:  “destination IP address +destination port number + protocol number” to search the mapping table. If a corresponding entry is found, the system generates a reverse mapping entry. The destination address and port in the entry are the IP address and port number on the internal network.

When you enable NAT mapping on a public network, all the hosts from the private network share the same public IP address.

If NAT mapping mode is set to endpoing-independent: nat mapping-mode endpoint-independent,  the NAT uses the same IP address and port mapping for packets sent from the same private IP address and port to any public IP address and port.