Method and apparatus to establish communication for layer 2 switched packets with Network Address Translation (NAT)
Methods and systems according to one or more embodiments establish communication across separate IP domains that are on the same layer 2 bridged domain. In an embodiment, a method includes receiving a configuration of a first IP address of a first node on a first side of a switch and a second IP address of a second node on a second side of the switch, wherein the first and second IP addresses are of different domains and are to be translated in each direction with respect to the switch, wherein the switch further comprises an integrated block adapted to do translation at line rate. Based on the configuration, the method also includes modifying, by the switch, packets of an applicable protocol in each direction so that the first and second IP addresses are changed for each domain such that either side of the switch acts as if an opposite side is on the same domain so that layer 2 communication is established.
1. An Industrial Ethernet switch comprising:
a downlink port configured to receive traffic from a first machine node with a pre-configured IP address;
an uplink port configured to transmit the received traffic to an external entity; and
one or more processors coupled between the downlink port and the uplink port and configured to perform network address translation on the received traffic, wherein the network address translation includes:
determining whether the received traffic includes a protocol packet of a protocol that does not work transparently across the network address translation; and
modifying a payload of the protocol packet when the received traffic includes the protocol packet.
2. The Industrial Ethernet switch of claim 1 , wherein the pre-configured IP address is selected from a duplicate address range.
3. The Industrial Ethernet switch of claim 2 , wherein the network address translation includes translating the pre-configured IP address to a unique IP address selected from a unique address range.
4. The Industrial Ethernet switch of claim 1 , wherein the protocol packet includes one or more of an address resolution protocol (ARP) packet or an Internet control message protocol (ICMP) packet.
5. The Industrial Ethernet switch of claim 1 , wherein the network address translation includes layer 2 network address translation (L2 NAT).
6. The Industrial Ethernet switch of claim 1 , wherein modifying the payload of the protocol packet is performed at a line rate of the Industrial Ethernet switch.
7. The Industrial Ethernet switch of claim 1 , wherein modifying the payload of the protocol packet is performed without a protocol proxy agent.
8. The Industrial Ethernet switch of claim 1 , wherein modifying the payload of the protocol packet includes correcting a cyclic redundancy check of the protocol packet.
9. The Industrial Ethernet switch of claim 1 , wherein modifying the payload of the protocol packet includes changing an embedded source IP address of the protocol packet without changing an embedded destination IP address of the protocol packet.
10. The Industrial Ethernet switch of claim 1 , wherein modifying the payload of the protocol packet includes changing an embedded source IP address of the protocol packet and an embedded destination IP address of the protocol packet.
11. The Industrial Ethernet switch of claim 1 , wherein modifying the payload of the protocol packet does not change any MAC addresses of the protocol packet.
12. The Industrial Ethernet switch of claim 1 , wherein the external entity includes an Industrial Ethernet Aggregation Switch.
13. The Industrial Ethernet switch of claim 1 , wherein the downlink port is further configured to receive traffic from a second machine node that shares the pre-configured IP address.
14. A method comprising:
receiving, via one or more downlink ports of an Industrial Ethernet switch, traffic from one or more machine nodes with pre-configured IP addresses;
performing network address translation on the received traffic;
determining whether the received traffic includes a protocol packet of a protocol that does not work transparently across the network address translation;
fixing up the protocol packet by modifying a payload of the protocol packet when the received traffic includes the protocol packet; and
transmitting, via one or more uplink ports of the Industrial Ethernet switch, the received traffic to one or more external entities.
15. The method of claim 14 , wherein the pre-configured IP addresses are selected from a duplicate address range, and wherein performing the network address translation includes translating the pre-configured IP addresses to unique IP addresses selected from a unique address range.
16. The method of claim 14 , wherein modifying the payload of the protocol packet includes changing an embedded source IP address of the protocol packet without changing an embedded destination IP address of the protocol packet.
17. The method of claim 16 , wherein modifying the payload of the protocol packet includes correcting a cyclic redundancy check of the protocol packet.
18. The method of claim 14 , wherein fixing up the protocol packet is performed at a line rate of the Industrial Ethernet switch.
19. A system comprising:
a first machine node with a first pre-configured IP address;
a second machine node with a second pre-configured IP address;
an Industrial Ethernet switch coupled to the first machine node and the second machine node, wherein the Industrial Ethernet switch is configured to:
receive traffic from the first and second machine nodes;
transmit the received traffic over one or more uplinks; and
when the first and second pre-configured IP addresses are duplicate IP addresses, perform network address translation on the received traffic, wherein the network address translation includes:
determining whether the received traffic includes a protocol packet of a protocol that does not work transparently across the network address translation; and
modifying a payload of the protocol packet when the received traffic includes the protocol packet.
20. The system of claim 19 , wherein modifying the payload of the protocol packet includes changing an embedded source IP address of the protocol packet to a unique IP address without changing an embedded destination IP address of the protocol packet.