Presentation on theme: "SIP Traversal over NAT Problems and Solutions Mr. Ting-Yun Chi May 2,2006 (Taiwan,NICI IPv6 R&D Division)"— Presentation transcript:
SIP Traversal over NAT Problems and Solutions Mr. Ting-Yun Chi May 2,2006 (Taiwan,NICI IPv6 R&D Division)
Outline Before we start NAT SIP Traversal over NAT NAT Check
Before we start…. You have learned VoIP You will try to use VoIP but only write the paper. Don ’ t forget the final solution.
Face the music… VoIP can ’ t work in most of the IPv4 networks. Most of the “ real network ” work with NAT
NAT(RFC2663) IP Network Address Translator (NAT) Terminology and Considerations Traditional NAT Basic NAT NAPT Bi-directional NAT Twice NAT Multi-Home NAT
Bi-directional NAT With a Bi-directional NAT, sessions can be initiated from hosts in the public network as well as the private network. Private network addresses are bound to globally unique addresses, statically or dynamically as connections are established in either direction. The name space (i.e., their Fully Qualified Domain Names) between hosts in private and external networks is assumed to be end- to-end unique.
Twice NAT Twice NAT is a variation of NAT in that both the source and destination addresses are modified by NAT as a datagram crosses address realms.
Multi-Home NAT Multiple NAT boxes or multiple links on the same NAT box, sharing the same NAT configuration can provide fail-safe backup for each other.
Basic NAT Variations (RFC 3489) STUN - Simple Traversal of User Datagram Protocol (UDP) Through Network Address Translators (NATs) Full Cone NAT Restricted Cone Port Restricted Cone: Symmetric
Full Cone A full cone NAT is one where all requests from the same internal IP address and port are mapped to the same external IP address and port. Furthermore, any external host can send a packet to the internal host, by sending a packet to the mapped external address.
Restricted Cone A restricted cone NAT is one where all requests from the same internal IP address and port are mapped to the same external IP address and port. Unlike a full cone NAT, an external host (with IP address X) can send a packet to the internal host only if the internal host had previously sent a packet to IP address X.
Port Restricted Cone A port restricted cone NAT is like a restricted cone NAT, but the restriction includes port numbers. Specifically, an external host can send a packet, with source IP address X and source port P, to the internal host only if the internal host had previously sent a packet to IP address X and port P.
Symmetric A symmetric NAT is one where all requests from the same internal IP address and port, to a specific destination IP address and port, are mapped to the same external IP address and port. If the same host sends a packet with the same source address and port, but to a different destination, a different mapping is used. Furthermore, only the external host that receives a packet can send a UDP packet back to the internal host
APP will get problem with NAT… From RFC2663.2993.RFC3022.RFC3027.RFC3225.RFC3489.P2P draft.. Non-port Data flow will be blocked Packet will be Changed Forward cause the lower performance Data flow will be blocked(directional)
Non-port Data flow will be blocked It will not happen in VoIP
Packet will be Changed Can ’ t pass IPsec(ESP)
Forward case the lower performance It ’ s easy to see..
Data flow will be blocked (directional) App need multi-session. Use IP payload info for connection P2P