Enabling NAT traversal for the CPE
For the connection request initiated from the ACS to reach the CPE, you must enable NAT traversal feature on the CPE when a NAT gateway resides between the CPE and the ACS.
The NAT traversal feature complies with RFC 3489 Simple Traversal of UDP Through NATs (STUN). The feature enables the CPE to discover the NAT gateway, and obtain an open NAT binding (a public IP address and port binding) through which the ACS can send unsolicited packets. The CPE sends the binding to the ACS when it initiates a connection to the ACS. For the connection requests sent by the ACS at any time to reach the CPE, the CPE maintains the open NAT binding.
![[NOTE: ]](images/note.png) | NOTE: Connection requests initiated from the CPE can reach the ACS through a NAT gateway without NAT traversal. | |
For more information about NAT, see Layer 3—IP Services Configuration Guide.
To enable NAT traversal on the CPE:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter CWMP view. | cwmp | N/A |
3. Enable NAT traversal. | cwmp cpe stun enable | By default, NAT traversal is disabled on the CPE. |