Internal Server - Huawei AR150 series Configuration Manual

Huawei AR150&200 Series Enterprise Routers
Configuration Guide - IP Service
Figure 5-2 PAT working process

Internal Server

NAT can shield internal hosts. In applications, users on the public network may need to access
the internal hosts. For example, users on the public network need to access a Web server or a
file transfer protocol (FTP) server.
NAT allows you to flexibly configure IP addresses for internal servers. For example, you can
use 202.110.10.10 or even 202.110.10.12:8080 as the public address of a Web server, and use
202.110.10.11 as the public address of an FTP server. Multiple servers (Web servers for
example) can be provided for external user.
You can configure an internal server and map the public address and port to the internal server.
In this way, hosts on the public network can access the internal server.
NAT Mapping
The NAT function saves IPv4 addresses and improves network security. NAT implementation
of different vendors may be different; therefore, the applications using the simple traversal of
UDP through NAT (STUN), traversal using relay NAT (TURN), and Interactive Connectivity
Establishment (ICE) technologies may fail to traverse the NAT devices of these vendors. These
technologies are commonly used on the SIP proxy. NAT mapping enables these applications to
traverse the NAT devices.
NAT Filtering
A NAT device filters the traffic from external network to internal network. After a host on the
internal network sends an access request to a host on the external network, the host on the external
Issue 02 (2012-03-30)
Datagram 1
Src IP:192.168.1.3
Src Port:23
Datagram 2
Src IP: 192.168.1.3
Src Port:80
192.168.1.3
192.168.1.2
Datagram 3
Src IP: 192.168.1.2
Src Port:23
Datagram 4
Src IP: 192.168.1.2
Src Port:80
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
PAT
Datagram 1
Src IP: 202.169.10.1
Src Port:10023
Datagram 2
Src IP: 202.169.10.1
Src Port:10080
Router
Datagram 3
Src IP: 202.169.10.1
Src Port:11023
Datagram 4
Src IP: 202.169.10.1
Src Port:11080
5 NAT Configuration
107