Control method and device for network address translation service

Abstract

The invention provides an operation control method for Network Address Transformation (NAT), which includes the following steps: the description information of NAT service corresponding to the user is firstly established in an Authentication, Authorization, Accounting (AAA) server, when the user gets online and passes the authentication and authorization, the description information of NAT service can be obtained from the AAA server, and the NAT gateway can control the NAT operation of the user according to the description information. The invention also provides a control device for NAT operation. By using the technical proposal of the invention, the flexibility of the NAT operation control can be enhanced and the individualized NAT service for the users can be realized.

Description

technical field [0001] The present invention relates to network communication technology, in particular to a network address translation (NAT, Network Address Translation) service control method and device. Background technique [0002] Network address translation is a technology that converts a private network Internet Protocol (IP, Internet Protocol) address into a public network IP address. It is mainly used to realize the function of private network accessing the public network. It can enable multiple private network computers to share the Internet connection. , a good solution to the shortage of public IP address resources. [0003] In NAT applications, private network hosts can not only access public network resources, but also provide external services, that is, provide opportunities for public networks to access private networks. At present, whether it is the business of private network accessing the public network or the business of private network providing extern...

AI Technical Summary

Problems solved by technology

In the case of many users and dynamic IP address allocation, the above-mentioned ACL configuration process will be more complicated, and it will be more troublesome to modify, less flexible, and not easy to manage

[0007] 2. Cannot provide personalized NAT service for users

[0008] Static configuration of ACL makes NAT service control only based on IP packet characteristics, not based on users

When different users use the same host to access the external network, the characteristics of the IP packets sent by the host may be the same. Although the internal and external network access services of different users may be different, the static ACL configuration method cannot distinguish this situation. The same processing will be performed for IP packets with the same characteristics, and personalized NAT services cannot be provided for different users

Images