Patent ID: 7716369

Claim:
A method for establishing communication in an arrangement where a workstation is connected to a local area network (LAN), the LAN is connected to a Network Address Translation (NAT) unit, the NAT unit is connected to a public network, and a registration server is also connected to said public network, where the workstation has a LAN address allowing said workstation to accept packets with a destination address corresponding to the workstation's LAN address (WS Local address) and packets emanating from said workstation carry said WS Local address as the packets' source address, the public network routes packets based on the packets' wide area network (WAN) addresses, and the NAT unit accepts a packet from said LAN that arrives at said NAT with a WS Local address as the source address and a destination address corresponding to a WAN address, to substitute said WS Local address with a WAN address of said NAT (NAT WAN address), and to forward said packet to said public network, comprising the steps of: said workstation sending to said registration server a REG message packet that comprises said WS Local address and WAN address of said registration server; said NAT passing to said server, via said public network a modified version of said REG message packet, with source address modified in accord with said address substitution performed by said NAT unit, said modified version of said REG message including information about said workstation; said server storing said information about said workstation; when, following said step of server storing, a hub that includes a proxy receives from said workstation an initial packet having a source address that is unknown to said proxy; (1) said proxy accepts said packet and in response thereto sends a REQUEST message to said registration server, specifying at least the source address of the received initial packet; (2) said registration server responding to said REQUEST message by sending to said proxy a GET message that associates with said NAT WAN address of said initial packet said information about said workstation and said WS Local address; (3) said proxy modifies the initial packet by replacing said NAT WAN address in the received initial packet with the WS Local address received from said registration server, and forwards the modified packet to remaining portion of said hub; and (4) said hub starts an IPsec exchange of data between said hub and said workstation.