Ds-Lite Nat444; Nat Entries; Nat Session Entry; Eim Entry - HPE FlexNetwork HSR6800 Configuration Manual

NOTE:
If the NAT444 configuration changes, NAT444 mappings for online users also change. The change
cannot be synchronized to the AAA server, affecting user tracing accuracy. As a best practice, log
off the users immediately after you change the NAT444 configuration. When the users come online,
NAT444 creates new mappings for them.

DS-Lite NAT444

DS-Lite combines tunneling and NAT to allow an IPv4 private network to access the IPv4 public
network over an IPv6 network. For more information about DS-Lite, see "Configuring tunneling."
DS-Lite NAT444 is configured on the AFTR and performs dynamic NAT444 based on the B4 element.
The B4 element refers to a B4 router or a DS-Lite host. DS-Lite NAT444 dynamically maps a public
IPv4 address and a port block to the IPv6 address of the B4 element. The DS-Lite host or hosts
behind the B4 router use the mapped public IPv4 address and port block to access the public IPv4
network.
DS-Lite NAT444 supports user tracing for DS-Lite hosts based on the port block.
Figure 55 DS-Lite NAT444
DS-Lite host
Host

NAT entries

NAT session entry

NAT creates a NAT session entry for a session and creates an address mapping for the first packet in
the session.
A NAT session entry contains extended NAT information, such as interface and translation method.
Subsequent packets of the session are translated by using this entry.
The session management module maintains the updating and aging of NAT session entries. For
information about session management, see Security Configuration Guide.

EIM entry

An EIM entry maps a private address/port to a public address/port. The same EIM entry applies to
subsequent connections originating from the same source IP and port.
An EIM entry ages out after all related NAT session entries age out.
IPv6 network
DS-Lite tunnel
B4
NAT gateway
IPv4 network
AFTR
117
Log server
Application
server