139
IPv4 address and a port block to the IPv6 address of the B4 element. The DS-Lite host or hosts
behind the B4 router use the mapped public IPv4 address and port block to access the public IPv4
network.
DS-Lite NAT444 supports user tracing for DS-Lite hosts based on the port block.
Figure 62 DS-Lite NAT444
NAT entries
NAT session entry
NAT creates a NAT session entry for a session and creates an address mapping for the first packet in
the session.
A NAT session entry contains extended NAT information, such as interface and translation method.
Subsequent packets of the session are translated by using this entry.
The session management module maintains the updating and aging of NAT session entries. For
information about session management, see Security Configuration Guide.
EIM entry
An EIM entry maps a private address/port to a public address/port. The same EIM entry applies to
subsequent connections originating from the same source IP and port.
An EIM entry ages out after all related NAT session entries age out.
NO-PAT entry
A NO-PAT entry maps a private address to a public address. The same mapping applies to
subsequent connections originating from the same source IP.
A NO-PAT entry can also be created during the ALG process for NAT. For information about NAT with
ALG, see "NAT with ALG."
A
NO-PAT entry ages out after all related NAT session entries age out.
NAT444 entry
A NAT444 entry maps a private IP address to a public IP address and a port block.
NAT444 entries include static and dynamic NAT444 mappings. For information about these
mappings, see "Static NAT444" and "Dynamic NAT444."
IPv4 network
Host
NAT gateway
Log server
Application
server
B4 AFTR
IPv6 network
DS-Lite tunnel
D
S
-
L
i
t
e
t
u
n
n
e
l
DS-Lite host