Nat

Router Bugs - IKE NAT Traversal

QA Cafe is constantly testing as many home networking devices as we can find, both to make sure CDRouter is the best testing product around and to find new and interesting tests to write. During that time, we have learned that the quality level of home and business routers/gateways on the market varies considerably. We know the world of networking protocols is complex and nuanced, and often a slight oversight in a standard or interpretation of a standard can mean the difference between a functioning home networking product and a high-tech paperweight. Read more...

Static NAT Testing with CDRouter

The CDRouter Multiport add-on includes support for static NAT configurations. CPE devices that support this functionality will have two or more public IPv4 addresses. One public address is typically assigned to the primary WAN connection and one or more additional public IPv4 addresses are also assigned. These additional IPv4 addresses are used to allow a host on the LAN side of CPE to have its own public IPv4 address on the WAN. Read more...

What NAT ALGs does CDRouter test?

CDRouter includes test cases for the following NAT ALGs: FTP DNS ICMP H.323 (outbound and inbound) MSN Messenger RTSP SIP IPSEC (IKE and IPSEC ESP) PPTP CDRouter also runs several applications through the device under test that do not require a full NAT ALG. These include: HTTP HTTPS SMTP POP3 TFTP

IPSEC pass through testing

IPSEC pass through is a technique for allowing IPSEC packets to pass through a NAT router. By itself, IPSEC does not work when it travels through NAT. Newer IKE and IPSEC implementations support NAT-Traversal which is a technique to detect NAT and switch to UDP encapsultion for IPSEC ESP packets. However, many router vendors have developed a “pass through” technique that allows IPSEC packets to pass through NAT without NAT-T support. Read more...