Social Media

Ixia on Facebook Ixia on LinkedIn Ixia on Twitter
Sales 1.877.367.4942 INTL 1.818.871.1800

Library: Test Plans

IxChariot : Testing in NAT'ed Networks



Overview
  1. Configuring IxChariot for traditional static NAT
  2. Configuring IxChariot for NAPT

Overview

Address-translated environments are a reality in virtually all IPv4-based test networks. This test primer explains the key concepts to effectively use IxChariot with devices performing traditional static Network Address Translation (i.e. one-to-one NAT) and static Network Address Port Translation (NAPT). Configuration parameters for the Device Under Test (DUT) are specific to a Cisco PIX.

1. Configuring IxChariot for traditional static NAT

Objective
Many firewalls, gateways and routers contain the ability to statically map a public (outside) IP address to a private (inside) IP address. This section will explain a typical network topology as well as the configuration parameters for IxChariot and the DUT.

Setup
The DUT in the topology shown below is performing traditional static NAT for Performance Endpoint 1 (E1). This means that private IP address 192.168.2.61 is translated to 'public' IP address 99.99.99.61.

Figure 1. Test Topology


Methodology
IxChariot Configuration
First, access 'Options' -> 'Change User Settings' -> 'Firewall' tab from the main IxChariot Console and verify the settings below (default settings).

Figure 2. Change User Settings Option


When creating the Performance Endpoint pairs, use 192.168.2.61 as 'Endpoint 1 network address' and use 192.168.2.62 as 'Endpoint 2 network address'. Select the Network protocol, application script and any applicable Service quality policy.

Figure 3. Add an Endpoint Pair Option


Next, go to 'Edit Pair Setup', uncheck 'Use Endpoint 1 values from pair' and type in the public IP address that is being used for the one-to-one mapping, i.e. 99.99.99.61. Leave "Use Endpoint 2 values from pair' checked.

Figure 4. Edit Pair Setup Option


DUT Configuration
A summary of the PIX configuration is shown below:
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
access-list outside permit tcp host 99.99.99.100 host 99.99.99.61 eq 10115
access-group outside in interface outside
static (inside, outside) 99.99.99.61 192.168.2.61

2. Configuring IxChariot for NAPT

Objective and Setup
The firewall in the Figure 1 is doing port redirection for all hosts behind it, including the Performance Endpoints. Incoming traffic destined to tcp port 10115 (default IxChariot TCP port for traffic between Console and E1) is translated to Performance Endpoint 1.

Methodology
IxChariot Configuration
The IxChariot configuration for NAPT is the same as for traditional static NAT described above.

DUT Configuration
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
static (inside,outside) tcp interface 10115 192.168.2.61 10115 netmask 255.255.255.255 0 0


[ back | top of page | back to test plans ]