NAT Traversal performs two tasks: it detects if both ends support NAT-T and NAT-Discovery that detects NAT devices along the transmission path.
NAT-D payload is a hash of the original IP and port. Devices exchange two NAT-D packets, one with source IP and port, and another with destination IP and port. So the receiving device recalculates the hash and compares it with the existing, if they don't match a NAT device exists.
NAT-T encapsulate IPSec packets in UDP packets with port 4500, providing information to PAT device for translation.
Lets say that we have the network in that picture with PAT running on the router, how PAT device make unique global identifier if both clients use the same NAT-T global UDP 4500 port ?
How NAT-T realy works in that case?
thanks,
john
