138
Hardware
NAT444 gateway and BRAS device
unification compatibility
MSR1002-4/1003-8S No
MSR2003 Yes
MSR2004-24/2004-48 Yes
MSR3012/3024/3044/3064 Yes
MSR4060/4080 Yes
NAT444 gateway and BRAS device unification is supported only for PPP users.
To unify the NAT444 gateway and BRAS device, specify the user address type in the ISP domain.
Supported user address types include private IPv4 address, private-DS address, and DS-Lite
address.
As shown in Figure 61, t
he NAT444 gateway and BRAS device function as follows after the
unification:
1. After a user of the specified address type passes authentication and obtains a private address,
NAT444 immediately assigns a public IP address and a port block to the user.
2. NAT444 sends the NAT444 mapping to the BRAS.
3. The BRAS records the mapping and reports it to the AAA server.
Compared to the separation of BRAS and NAT444, the unification provides the following functions:
• If the NAT444 resources have been used up, the BRAS logs off the user, which ensures
accurate accounting on the AAA server.
• The AAA server maintains one mapping for each online user until the user goes offline. This
solution implements user tracing without requiring an extra log server.
Figure 61 NAT444 gateway unified with BRAS device
NOTE:
If the NAT444 configuration changes, NAT444 mappings for online users also change. The change
cannot be synchronized to the AAA server, affecting user tracing accuracy. As a best practice, log
off the users immediately after you change the NAT444 configuration. When the users come online,
NAT444 creates new mappings for them.
DS-Lite NAT444
DS-Lite combines tunneling and NAT to allow an IPv4 private network to access the IPv4 public
network over an IPv6 network. For more information about DS-Lite, see "Configuring tunneling."
DS-Lite NAT444 is configured on the AFTR and performs dynamic NAT444 based on the B4 element.
The B4 element refers to a B4 router or a DS-Lite host. DS-Lite NAT444 dynamically maps a public
To Next Page
Loading...
Need help?
General
