Techniques for network address and port translation for network protocols that do not use translated ports when requesting network resources

• US 7,219,161 B1
• Filed: 08/29/2001
• Issued: 05/15/2007
• Est. Priority Date: 08/29/2001
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Fagundo, Arturo, Karolyshyn, Thomas P.
• Primary Examiner(s): Dharia; Rupal
• Assistant Examiner(s): Shingles; Kristie D.
• Application Number:
  US09/942,822
• Time in Patent Office: 2,085 Days
• Field of Search: 709/245, 709/213, 709/249, 709/225, 709/224, 709/229, 370/219, 370/389, 707/9, 707/3, 455/426, 379/219
• US Class Current: 709/245
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2517 using port numbers
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]

Abstract

Techniques for translating between logical addresses and ports of a first network, and logical addresses and ports of a second network connected to the first network at an intermediate device include receiving a first packet at the intermediate device from a first device having a first address on the first network. A second packet is sent to a second device on the second network in response to receiving the first packet. The second packet includes, in a source address field, a particular address of the intermediate device on the second network. It is determined whether the first packet includes a resource registration message that registers a first resource on the first device with a protocol server for a particular protocol. The protocol server is available at the second device on the second network. If the first packet includes the resource registration message, then information in the resource registration message for uniquely requesting the first resource is determined. The first information is stored in a first data structure in association with the first address. As a result, network address and port translation (NAPT) functions in a system using NetBIOS protocol.

Claims

1. A method for translating between logical addresses and ports of a first network and a logical address and ports of a second network connected to the first network at an intermediate device, the method comprising the computer-implemented step of:

receiving at the intermediate device a first packet from a first device having a first address on the first network;

sending a second packet to a second device on the second network in response to receiving the first packet, the second packet including, in a source address field, data indicating a particular address of the intermediate device on the second network;

determining whether the first packet includes a first message that registers a first resource on the first device with a protocol server for a particular protocol, the protocol server available at the second device on the second network, wherein;

the particular protocol does not support translated ports for requesting network resources, and

the protocol server is configured to register unique names for resources provided by devices on the second network according to the particular protocol; and

if it is determined that the first packet includes the first message registering the first resource, then

determining first information in the first message for uniquely requesting the first resource, and

storing data indicating the first information in a first data structure in association with the first address,

wherein the intermediate device performs the steps of determining the first information in the first message and storing data indicating the first information in the first data structure.

2. A method as recited in claim 1, further comprising the computer-implemented step of:

receiving at the intermediate device a third packet from a third device on the second network;

determining whether the third packet includes a second message requesting a second resource according to the particular protocol; and

if it is determined that the third packet includes the second message requesting the second resource, then

determining second information in the second message for uniquely requesting the second resource,

determining whether the second information matches the first information in the data structure, and

if the second information matches the first information, sending the second message to the first device having the first address associated with the first information.

3. A method as recited in claim 1, wherein, if it is determined that the first packet includes the first message, then inserting in the second packet a second message based on the first message.

4. A method as recited in claim 3, wherein the second message is the same as the first message.

5. A method as recited in claim 3, further comprising the computer-implemented step of generating the second message by replacing, in a source address field, data indicating the first address with data indicating the particular address of the intermediate device on the second network.

6. A method as recited in claim 1, wherein

a source port field in the first packet includes data indicating a first source port;

said step of sending the second packet to the second device further comprises

storing in a second data structure uniquely associated with the first address and the first source port a particular translated port, and

inserting data indicating the particular translated port into a source port field of the second packet.

7. A method as recited in claim 1, wherein the particular protocol uses a well-known port for requesting the first resource.

8. A method as recited in claim 1, wherein the particular protocol is a network basic input and output system (NetBIOS) open protocol.

9. A method as recited in claim 1, wherein the protocol server is a network basic input and output system (NetBIOS) name server.

10. A method as recited in claim 1, wherein the first information is a resource name.

11. A method as recited in claim 5, wherein the protocol server is a name server that stores a resource name of the first resource in the second message in association with an address based on data in the source address field of the second message.

12. A method as recited in claim 1, wherein the protocol server is a name server that stores data indicating a resource name of the first resource, and does not store data in a source port field of the second packet in association with the resource name.

13. A method as recited in claim 2, wherein the third packet includes, in a destination address field, data indicating the particular address of the intermediate device.

14. A method as recited in claim 2, said step of determining whether the third packet includes the second message comprising determining whether a destination port field in the third packet includes data indicating a well-known port associated with requesting a resource according to the particular protocol.

15. A method as recited in claim 1, further comprising the computer-implemented steps of:

monitoring messages associated with registering the first resource with the protocol server;

determining whether the first resource is not registered with the protocol server; and

if it is determined that the first resource is not registered with the protocol server, then removing from the first data structure the data indicating the first information in association the first address.

16. A computer-readable medium carrying one or more sequences of instructions for translating between logical addresses and ports of a first network, and logical addresses and ports of a second network connected to the first network at an intermediate device, which instructions, when executed by one or more processors, cause the one or more processors to carry out the steps of:

receiving at the intermediate device a first packet from a first device having a first address on the first network;

sending a second packet to a second device on the second network in response to receiving the first packet, the second packet including, in a source address field, data indicating a particular address of the intermediate device on the second network;

determining whether the first packet includes a first message that registers a first resource on the first device with a protocol server for a particular protocol, the protocol server available at the second device on the second network, wherein;

the particular protocol does not support translated ports for requesting network resources, and

the protocol server is configured to register unique names for resources provided by devices on the second network according to the particular protocol; and

if it is determined that the first packet includes the first message registering the first resource, then

determining first information in the first message for uniquely requesting the first resource, and

storing data indicating the first information in a first data structure in association with the first address,

wherein the intermediate device performs the steps of determining the first information in the first message and storing data indicating the first information in the first data structure.

17. An apparatus comprising an intermediate networking device for translating between logical addresses and ports of a first network, and logical addresses and ports of a second network connected to the first network at the intermediate device, comprising:

means for receiving at the intermediate device a first packet from a first device having a first address on the first network;

means for sending a second packet to a second device on the second network in response to receiving the first packet, the second packet including, in a source address field, data indicating a particular address of the intermediate device on the second network;

means for determining whether the first packet includes a first message that registers a first resource on the first device with a protocol server for a particular protocol, the protocol server available at the second device on the second network, wherein;

the particular protocol does not support translated ports for requesting network resources, and

the protocol server is configured to register unique names for resources provided by devices on the second network according to the particular protocol;

means for determining first information in the first message for uniquely requesting the first resource, if it is determined that the first packet includes the first message, and

means for storing data indicating the first information in a first data structure in association with the first address, if it is determined that the first packet includes the first message.

19. An apparatus as recited in claim 17, further comprising:

means for receiving at the intermediate device a third packet from a third device on the second network;

means for determining whether the third packet includes a second message requesting a second resource according to the particular protocol;

means for determining second information in the second message for uniquely requesting the second resource, if it is determined that the third packet includes the second message requesting the second resource;

means for determining whether the second information matches the first information in the data structure if it is determined that the third packet includes the second message requesting the second resource; and

means for sending the second message to the first device having the first address associated with the first information, if it is determined that the third packet includes the second message requesting the second resource and if the second information matches the first information.

20. An apparatus as recited in claim 17, wherein:

a source port field in the first packet includes data indicating a first source port; and

the means for sending the second packet to the second device further comprises;

means for storing in a second data structure uniquely associated with the first address and the first source port a particular translated port, and

means for inserting data indicating the particular translated port into a source port field of the second packet.

21. An apparatus as recited in claim 17, wherein the particular protocol is a network basic input and output system (NetBIOS) open protocol.

22. An apparatus as recited in claim 17, further comprising:

means for inserting in the second packet a second message based on the first message, if it is determined that the first packet includes the first message; and

means for generating the second message by replacing, in a source address field, data indicating the first address with data indicating the particular address of the intermediate device on the second network, wherein the protocol server is a name server that stores a resource name of the first resource in the second message in association with an address based on data in the source address field of the second message.

23. An apparatus as recited in claim 17, further comprising:

means for monitoring messages associated with registering the first resource with the protocol server;

means for determining whether the first resource is not registered with the protocol server; and

means for removing from the first data structure the data indicating the first information in association the first address, if it is determined that the first resource is not registered with the protocol server.

18. An apparatus comprising an intermediate networking device for translating between logical addresses and ports of a first network, and logical addresses and ports of a second network connected to the first network through the intermediate device, comprising:

a first network interface that is coupled to the first network for sending and receiving messages thereon;

a second network interface that is coupled to the second network for sending and receiving messages thereon;

a processor;

one or more stored sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of;

receiving at the intermediate device a first packet from a first device having a first address on the first network;

sending a second packet to a second device on the second network in response to receiving the first packet, the second packet including, in a source address field, data indicating a particular address of the intermediate device on the second network;

determining whether the first packet includes a first message that registers a first resource on the first device with a protocol server for a particular protocol, the protocol server available at the second device on the second network, wherein;

the particular protocol does not support translated ports for requesting network resources, and

the protocol server is configured to register unique names for resources provided by devices on the second network according to the particular protocol; and

if it is determined that the first packet includes the first message registering the first resource, then

determining first information in the first message for uniquely requesting the first resource, and

storing data indicating the first information in a first data structure in association with the first address.

24. An apparatus as recited in claim 18, wherein the one or more stored sequences of instructions further comprise instructions which, when executed by the processor, cause the processor to carry out the steps of:

receiving at the intermediate device a third packet from a third device on the second network;

determining whether the third packet includes a second message requesting a second resource according to the particular protocol; and

if it is determined that the third packet includes the second message requesting the second resource, then

determining second information in the second message for uniquely requesting the second resource,

determining whether the second information matches the first information in the data structure, and

if the second information matches the first information, sending the second message to the first device having the first address associated with the first information.

25. An apparatus as recited in claim 18, wherein:

a source port field in the first packet includes data indicating a first source port; and

the sequences of instructions which cause the processor to carry out the step of sending the second packet to the second device further comprise instructions which, when executed by the processor, cause the processor to carry out the steps of;

storing in a second data structure uniquely associated with the first address and the first source port a particular translated port, and

inserting data indicating the particular translated port into a source port field of the second packet.

26. An apparatus as recited in claim 18, wherein the particular protocol is a network basic input and output system (NetBIOS) open protocol.

27. An apparatus as recited in claim 18, wherein the one or more stored sequences of instructions further comprise instructions which, when executed by the processor, cause the processor to carry out the steps of:

if it is determined that the first packet includes the first message, then inserting in the second packet a second message based on the first message; and

generating the second message by replacing, in a source address field, data indicating the first address with data indicating the particular address of the intermediate device on the second network, wherein the protocol server is a name server that stores a resource name of the first resource in the second message in association with an address based on data in the source address field of the second message.

28. An apparatus as recited in claim 18, wherein the one or more stored sequences of instructions further comprise instructions which, when executed by the processor, cause the processor to carry out the steps of:

monitoring messages associated with registering the first resource with the protocol server;

determining whether the first resource is not registered with the protocol server; and

if it is determined that the first resource is not registered with the protocol server, then removing from the first data structure the data indicating the first information in association the first address.