Method and apparatus to establish communication for layer 2 switched packets with Network Address Translation (NAT)

• US 10,243,888 B2
• Filed: 04/24/2017
• Issued: 03/26/2019
• Est. Priority Date: 11/27/2012
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Bennett, Marc, Nguyen, Yen Teresa, Harrod, Jonathan, Wu, Charles, Pathan, Aijaz
• Primary Examiner(s): Dennison, Jerry B
• Application Number:
  US15/495,605
• Publication Number:
  US 20170230309A1
• Time in Patent Office: 701 Days
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 49/351 for local area network [LAN], e.g. Ethernet switches
• CPC Class Codes: H04L 61/103 across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP]
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2528 Translation at a proxy
• CPC Class Codes: H04L 61/256 NAT traversal
• CPC Class Codes: H04L 61/5007 Internet protocol [IP] addresses

Abstract

Methods and systems according to one or more embodiments establish communication across separate IP domains that are on the same layer 2 bridged domain. In an embodiment, a method includes receiving a configuration of a first IP address of a first node on a first side of a switch and a second IP address of a second node on a second side of the switch, wherein the first and second IP addresses are of different domains and are to be translated in each direction with respect to the switch, wherein the switch further comprises an integrated block adapted to do translation at line rate. Based on the configuration, the method also includes modifying, by the switch, packets of an applicable protocol in each direction so that the first and second IP addresses are changed for each domain such that either side of the switch acts as if an opposite side is on the same domain so that layer 2 communication is established.

Claims

1. An Industrial Ethernet switch comprising:

a downlink port configured to receive traffic from a first machine node with a pre-configured IP address;

an uplink port configured to transmit the received traffic to an external entity; and

one or more processors coupled between the downlink port and the uplink port and configured to perform network address translation on the received traffic, wherein the network address translation includes;

determining whether the received traffic includes a protocol packet of a protocol that does not work transparently across the network address translation; and

modifying a payload of the protocol packet when the received traffic includes the protocol packet.

2. The Industrial Ethernet switch of claim 1, wherein the pre-configured IP address is selected from a duplicate address range.

3. The Industrial Ethernet switch of claim 2, wherein the network address translation includes translating the pre-configured IP address to a unique IP address selected from a unique address range.

4. The Industrial Ethernet switch of claim 1, wherein the protocol packet includes one or more of an address resolution protocol (ARP) packet or an Internet control message protocol (ICMP) packet.

5. The Industrial Ethernet switch of claim 1, wherein the network address translation includes layer 2 network address translation (L2 NAT).

6. The Industrial Ethernet switch of claim 1, wherein modifying the payload of the protocol packet is performed at a line rate of the Industrial Ethernet switch.

7. The Industrial Ethernet switch of claim 1, wherein modifying the payload of the protocol packet is performed without a protocol proxy agent.

8. The Industrial Ethernet switch of claim 1, wherein modifying the payload of the protocol packet includes correcting a cyclic redundancy check of the protocol packet.

9. The Industrial Ethernet switch of claim 1, wherein modifying the payload of the protocol packet includes changing an embedded source IP address of the protocol packet without changing an embedded destination IP address of the protocol packet.

10. The Industrial Ethernet switch of claim 1, wherein modifying the payload of the protocol packet includes changing an embedded source IP address of the protocol packet and an embedded destination IP address of the protocol packet.

11. The Industrial Ethernet switch of claim 1, wherein modifying the payload of the protocol packet does not change any MAC addresses of the protocol packet.

12. The Industrial Ethernet switch of claim 1, wherein the external entity includes an Industrial Ethernet Aggregation Switch.

13. The Industrial Ethernet switch of claim 1, wherein the downlink port is further configured to receive traffic from a second machine node that shares the pre-configured IP address.

14. A method comprising:

receiving, via one or more downlink ports of an Industrial Ethernet switch, traffic from one or more machine nodes with pre-configured IP addresses;

performing network address translation on the received traffic;

determining whether the received traffic includes a protocol packet of a protocol that does not work transparently across the network address translation;

fixing up the protocol packet by modifying a payload of the protocol packet when the received traffic includes the protocol packet; and

transmitting, via one or more uplink ports of the Industrial Ethernet switch, the received traffic to one or more external entities.

15. The method of claim 14, wherein the pre-configured IP addresses are selected from a duplicate address range, and wherein performing the network address translation includes translating the pre-configured IP addresses to unique IP addresses selected from a unique address range.

16. The method of claim 14, wherein modifying the payload of the protocol packet includes changing an embedded source IP address of the protocol packet without changing an embedded destination IP address of the protocol packet.

17. The method of claim 16, wherein modifying the payload of the protocol packet includes correcting a cyclic redundancy check of the protocol packet.

18. The method of claim 14, wherein fixing up the protocol packet is performed at a line rate of the Industrial Ethernet switch.

19. A system comprising:

a first machine node with a first pre-configured IP address;

a second machine node with a second pre-configured IP address;

an Industrial Ethernet switch coupled to the first machine node and the second machine node, wherein the Industrial Ethernet switch is configured to;

receive traffic from the first and second machine nodes;

transmit the received traffic over one or more uplinks; and

when the first and second pre-configured IP addresses are duplicate IP addresses, perform network address translation on the received traffic, wherein the network address translation includes;

determining whether the received traffic includes a protocol packet of a protocol that does not work transparently across the network address translation; and

modifying a payload of the protocol packet when the received traffic includes the protocol packet.

20. The system of claim 19, wherein modifying the payload of the protocol packet includes changing an embedded source IP address of the protocol packet to a unique IP address without changing an embedded destination IP address of the protocol packet.