Skip to content
uencoder

Port Restricted Cone NAT

Port restricted cone NAT admits inbound packets only when both the external source IP and port match what the internal host previously sent to—stricter than restricted cone.

Purpose

It restricts the external source IP and port so only the exact endpoint the internal host contacted may reply.

Mechanism

The mapping is fixed, and an inbound packet's source IP and port must both match an endpoint the internal host has sent to. It is stricter than restricted cone, with symmetric NAT being the strictest.

Use cases

  • NAT type analysis
  • P2P traversal
  • STUN

Related tools

References