Prestige 2000W User’s Guide
78
Chapter 12 User Web Configurator Screens
12.10.2.1 Full Cone NAT
In full cone NAT, the NAT router maps the source address of all outgoing packets to one IP
address and port on another network. The NAT router also maps packets coming to that
address and port on the other network back to the original source address.
12.10.2.1.1 Full Cone NAT: Outgoing
See the following figure. The Prestige (X) uses port 80 to send some packets to server Y. The
Prestige’s IP address is 10.0.0.3 (a private IP address). The NAT router receives the packets
from the Prestige with the private source address 10.0.0.3:80 and changes them to use public
source address a.b.c.d:30080 before forwarding them on to Y.
Figure 22
Full Cone NAT: Outgoing
12.10.2.1.2 Full Cone NAT: Incoming
Servers Y and Z can both send packets to IP address a.b.c.d and port 30080. The NAT router
changes the destination address to the private IP address 10.0.0.3 and port 80 and sends it to
the Prestige.
Figure 23
Full Cone NAT: Incoming
12.10.2.2 Restricted Cone NAT
For all outgoing packets, restricted cone NAT maps the source address to one IP address and
port on another network. This is the same as full cone NAT (see
Section 12.10.2.1.1 on page
78
for an example).
However, packets can only be sent back through NAT from an IP address to which packets
have been sent from the original source address.
In the following example, X already sent a packet to Y, so Y can send a packet to X. X did not
send a packet to Z, so Z cannot send packets to X.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
