R0106-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V7)

115
NAT entries
NAT session entry
NAT translates the IP address of the first packet in a session and creates a NAT session entry for recording
the mappings. The NAT session entry contains extended NAT information, such as interface and
translation method. Subsequent packets of the session are translated by using this entry.
The session management module maintains the updating and aging of NAT session entries. For
information about session management, see Security Configuration Guide.
EIM entry
A NAT device with the PAT Endpoint-Independent Mapping configured creates the following:
• First a NAT session entry.
• Then an EIM entry for recording the mapping between an internal address/port and a NAT
address/port.
The EIM entry provides the following benefits:
• The same mapping applies to subsequent connections originating from the same source IP and port
as the first connection.
• Allows reverse translation for connections originating from external hosts to the NAT address and
port based on the EIM entry.
An EIM entry ages out after all related NAT session entries age out.
NO-PAT entry
A NAT device with NO-PAT translation method configured creates the following:
• First a NAT session entry.
• Then a NO-PAT entry for recording the mapping between an internal address and a NAT address.
A NO-PAT entry can also be created during the ALG process for NAT. For information about NAT with
ALG, see "NAT with ALG."
T
he NO-PAT entry provides the following benefits:
• The same mapping applies to subsequent connections originating from the same source IP as the
first connection.
• The reversible keyword allows translating the destination IP address of the first packet of a
connection originating from an external host that meets the specified conditions to the NAT address
based on the existing NO-PAT entry.
A NO-PAT entry ages out after all related NAT session entries age out.
NAT444 entry
A NAT444 entry records the mapping from a private IP address to a public IP address and a port block.
NAT444 entries can be static or dynamic NAT444 mappings.
For information about these mappings, see "Static NAT444" and "Dynamic NAT444."