128
NAT with DNS mapping
NAT with DNS mapping allows an internal host to access an internal server on the same private
network by using the domain name of the internal server when the DNS server is on the public
network.
NAT with DNS mapping must operate with the NAT Server feature.
Figure 62 NAT with DNS mapping
As shown in Figure 62, NAT with DNS mapping works as follows:
1. The host sends a DNS request containing the domain name of the internal Web server.
2. Upon receiving the DNS response, the NAT device performs a DNS mapping lookup by using
the domain name in the response. A DNS mapping for NAT maps the domain name to the
public IP address, public port number, and the protocol type for the internal server.
3. If a match is found, the NAT continues to compare the public address, public port number, and
the protocol type with the NAT Server configuration. The NAT Server configuration maps the
public IP address and port number to the private IP address and port number for the internal
server.
4. If a match is found, NAT translates the public IP address in the response into the private IP
address of the Web server.
5. The internal host receives the DNS response, and obtains the private IP address of the Web
server.
DNS mapping can also be used by DNS ALG. The DNS reply from the external DNS server contains
only the domain name and public IP address of the internal server in the payload. The NAT interface
might have multiple internal servers configured with the same public IP address but different private
IP addresses. DNS ALG might find an incorrect internal server by using only the public IP address. If
a DNS mapping is configured, DNS ALG can obtain the public IP address, public port number, and
protocol type of the internal server by using the domain name. Then it can find the correct internal
server by using the public IP address, public port number, and protocol type of the internal server.
NAT with ALG
NAT with ALG translates address or port information in the application layer payloads to ensure
connection establishment.
For example, an FTP application includes a data connection and a control connection. The IP
address and port number for the data connection depend on the payload information of the control
connection. This requires NAT with ALG to translate the address and port information for data
connection establishment.
To Next Page
Loading...
Need help?
General
