[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

20040827: LDM under NAT

This archive contains answers to questions sent to Unidata support through mid-2025. Note that the archive is no longer being updated. We provide the archive for reference; many of the answers presented here remain technically correct, even if somewhat outdated. For the most up-to-date information on the use of NSF Unidata software and data services, please consult the Software Documentation first.

  • Subject: 20040827: LDM under NAT
  • Date: Fri, 27 Aug 2004 13:13:36 -0600
Waldenio,

> To: address@hidden
> From: Waldenio Almeida <address@hidden>
> Subject: LDM under NAT
> Organization: INPE/CPTEC
> Keywords: 200408231504.i7NF48Xn000899 LDM firewall NAT

The above message contained the following:

> We are preparing the CPTEC's Stand on Brazilian
> Congress, for next week. We will have a couple
> of LDMs working during the congress.
> 
> The initial setup for Internet is thought to be an
> ADSL with a sub-network under it. The CPTEC's support
> personal intend to mount some kind of NAT, and the
> LDM will be inside this sub-network, along with
> other computers.
> 
> I am afraid that LDM authentication will refuse 
> that setup, and deny connection. Is it Right ?

> The LDM can work in a sub-network where his "real"
> IP isnt is the IP that is seen by upstream LDM ?

An LDM behind a NAT should be able to request data from outside the
NAT if the IP address of the NAT device has an ALLOW entry in the
configuration-file of the outside LDM.

An LDM outside a NAT should be able to request data from an LDM behind a
NAT if the NAT device is configured to forward all connections to port
388 to the LDM host behind the NAT.

Tom should be able to help you with this.

> Many Thanks,
> Waldenio
> CPTEC/INPE

Regards,
Steve Emmerson

> NOTE: All email exchanges with Unidata User Support are recorded in the
> Unidata inquiry tracking system and then made publically available
> through the web.  If you do not want to have your interactions made
> available in this way, you must let us know in each email you send to us.