High Density Network Address Translator and Data Encapsulator

The 570NAT-X19-10G is a high-density, multi-port, multi-flow hardware Network Address Translation (NAT) engine with enhanced features including port aggregation, tunneling, packet replication and bandwidth capping, allowing service providers to seamlessly bridge across networks in multi- tenant environments.

The 570NAT-X19-10G is organized as 6 WAN-side ports plus 6 LAN-side ports, with a packet processing core between each WAN-LAN pair. Each processing core can sustain up to 256 data fl ows, configurable based on multicasts or VLAN Tags. This gives an exceptional product density of 12x 10GbE ports, with 1536 multicast/VLAN flows - all in the space-efficient Evertz 570 modular hardware platform.

Multiple processing cores can be configured to aggregate their Tx traffic to a single WAN Port. Correspondingly, Rx traffic from that WAN port is distributed to its contributing processing cores. WAN-side port aggregation allows network engineers to achieve functions such as port-based redundancy using the 570NAT-X19-10G.

The 570NAT-X19-10G is controlled by the industry-leading VistaLINK PRO, and via web interface. The 12 Ethernet ports support 10GbE and offer full fl exibility for LAN and WAN interfacing. The 570NAT-X19-10G provides four modes of operation:

The One-to-One NAT Mode allows unicast/multicast IP streams from one network to be translated to different unicast/multicast IP addresses, on a fl ow-by-fl ow basis, up to 256 unique fl ows per processing core. Address translation is available in both directions, while an optional packet replication feature is provided in the WAN-to-LAN direction.

The tunneling (or Encapsulation or MC-in-MC) NAT Mode allows unicast/ multicast addresses from the LAN side to be encapsulated into new multicasts for the WAN network, again, on a fl ow-by-fl ow basis, up to 128 unique settings per processing core. Correspondingly, traffic is de- encapsulated in the WAN-to-LAN direction.

The VLAN Mode allows VLAN-tagged datagrams from the LAN side to seamlessly enter a WAN after multicast encapsulation, similar to the tunneling NAT mode. In this mode, however, fl ows are based on VLAN tags, rather than unicasts/multicasts alone. Up to 256 unique flows can be configured per processing core, with independent encapsulation headers.

The port mode allows the user to encapsulate all incoming LAN traffi c on a given physical port, on a port-by-port basis. There is no multicast or VLAN Tag filtering - all traffic on that physical LAN port is encapsulated out to the WAN and de-encapsulated in the reverse direction. This mode provides a bandwidth capping feature such that network operators can ensure that links do not over-subscribe their contribution limits to a WAN.