STUN Server Mediates NAT Address Mapping for Network Management

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Network Management Systems (NMS) are unable to manage devices operating behind Network Address Translator (NAT) boundaries due to lack of access to private IP addresses and dynamically reassigned port numbers, which are not routable and cannot be obtained by the NMS.

Innovation Solution

A device in a private network communicates with a STUN server to obtain a public NAT IP address and port number, then provides this information along with a unique device identifier to the NMS, allowing the NMS to manage devices behind NATs and update address information as needed.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Quantity of substance

If NAT is used for IP address simplification and conservation, then IP address simplification and conservation is improved, but device manageability by NMS deteriorates

Engineering Contradiction:
ImproveIP address conservationVSAvoiddevice manageability
Core Design Contradiction:
Quantity of substanceVSEase of operation

Solution Approach 1:

The patent introduces a STUN server as an intermediary component that mediates between devices behind NAT and the NMS. The STUN server obtains public IP address and port number information from devices behind NAT boundaries and provides this information to the NMS, enabling management capability while preserving NAT's IP conservation function.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Quantity of substance

If private IP addresses are used behind NAT, then IP address conservation is improved, but address accessibility by NMS deteriorates

Engineering Contradiction:
ImproveIP address conservationVSAvoidaddress information availability
Core Design Contradiction:
Quantity of substanceVSLoss of information

Solution Approach 1:

The STUN server acts as an information bridge that obtains public IP address and port number mappings from devices behind NAT and transmits this information to the NMS, preventing information loss about device addresses while maintaining private IP usage.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary action by having devices periodically query the STUN server to obtain their current public IP and port number information before NMS needs to manage them, ensuring address information is available in advance of any management operations.

Inventive Principle:
Principle #10Preliminary action

3Quantity of substance

If dynamic port number assignment is used by NAT, then IP address conservation is improved, but communication reliability deteriorates

Engineering Contradiction:
ImproveIP address conservationVSAvoidcommunication reliability
Core Design Contradiction:
Quantity of substanceVSReliability

Solution Approach 1:

The patent implements feedback mechanisms where devices periodically query the STUN server to obtain updated public IP and port number information, and where the NMS receives notifications when address information changes, enabling the system to adapt to dynamic port assignments and maintain communication reliability.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system performs preliminary action by having devices proactively query the STUN server for their current public address information before communication sessions are established, ensuring the NMS has the correct addressing information available in advance.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS7515549B2Managing devices across NAT boundaries
Publication Date: 2009.04.07 CISCO TECHNOLOGY INC
  • US7515549B2 patent drawing
  • US7515549B2 patent drawing
  • US7515549B2 patent drawing

AI summary

An address management scheme allows a Network Management System (NMS) to manage devices in a private network operating behind a Network Address Translator (NAT) boundary. A device operating in the private network sends a communication to a Simple Traversal of User Datagram Protocol (UDP) Through Network Address Translators (NATs) (STUN) server. The STUN server responds by communicating a public NAT IP address and a NAT port number back to the device. The device then provides the NMS with the public NAT IP address, a NAT port number associated with the device, a unique device identifier, and the private device IP address. The NMS stores this information in a table and then accesses this address information to manage the device in the private network. The device then uses the STUN server to identify any changes to the device address information and then sends the changes to the NMS.