570NAT-HW-X19
High Density Network Address Translator
Revision 1.0
Page - 1
1.
OVERVIEW
The 570NAT–X19–10G is a high–density, multi–port, multi–flow hardware Network Address Translation
(NAT) engine with enhanced features including port aggregation, tunneling, packet replication and
bandwidth capping, allowing service providers to seamlessly bridge across networks in multi–tenant
environments.
The 570NAT–X19–10G is organized as 6 WAN–side ports plus 6 LAN–side ports, with a packet
processing core between each WAN–LAN pair. Each processing core can sustain up to 256 data flows,
configurable based on multicasts or VLAN Tags. This gives an exceptional product density of 12x
10GbE ports, with 1536 multicast/VLAN flows — all in the space–efficient Evertz 570 modular hardware
platform.
Multiple processing cores can be configured to aggregate their Tx traffic to a single WAN Port.
Correspondingly, Rx traffic from that WAN port is distributed to its contributing processing cores. WAN–
side port aggregation allows network engineers to achieve functions such as port–based redundancy
using the 570NAT–X19–10G.
The 570NAT–X19–10G is controlled by the industry–leading VistaLINK PRO, and via web interface.
The 12 Ethernet ports support 10GbE and offer full flexibility for LAN and WAN interfacing.
The 570NAT–X19–10G provides four modes of operation:
1. The One–to–One NAT Mode allows unicast/multicast IP streams from one network to be
translated to different unicast/multicast IP addresses, on a flow–by–flow basis, up to 256 unique
flows per processing core. Address translation is available in both directions, while an optional
packet replication feature is provided in the WAN–to–LAN direction.
2. The tunneling (or Encapsulation or MC–in–MC) NAT Mode allows unicast/multicast addresses
from the LAN side to be encapsulated into new multicasts for the WAN network, again, on a
flow–by–flow basis, up to 128 unique settings per processing core. Correspondingly, traffic is
de–encapsulated in the WAN–to–LAN direction.
3. The VLAN Mode allows VLAN–tagged datagrams from the LAN side to seamlessly enter a
WAN after multicast encapsulation, similar to the tunneling NAT mode. In this mode, however, fl
ows are based on VLAN tags, rather than unicasts/multicasts alone. Up to 256 unique flows can
be configured per processing core, with independent encapsulation headers.
4. The port mode allows the user to encapsulate all incoming LAN traffic on a given physical port,
on a port–by–port basis. There is no multicast or VLAN Tag filtering — all traffic on that physical
LAN port is encapsulated out to the WAN and de–encapsulated in the reverse direction. This
mode provides a bandwidth capping feature such that network operators can ensure that links
do not over–subscribe their contribution limits to a WAN.
