The NAT code needs to know if this port uses a connection oriented exchange (TCP), or not (UDP). The cpemgr value represents a wildcard that defines a set of PAT Bindings. When using this wildcard, the publicPort value represents the first port of a consecutive block of publicPorts, and the localPort value represents the number of publicPorts in this block. The actual local ports are well known ports and the set of bindings is currently: Public | Local Well | Type | Name Port | Known Port | | <publicPort>| 7 | TCP,UDP | ECHO +1 | 20 | TCP | FTP - data +2 | 21 | TCP | FTP - control +3 | 22 | TCP,UDP | SSH +4 | 23 | TCP,UDP | Telnet +5 | 80 | TCP | HTTP +6 | 81 | TCP | HTTP +7 | 161 | TCP,UDP | SNMP +8 | 443 | TCP | HTTPS With this set, the localPort value should be 9. Public | Local Well | Type | Name Port | Known Port | | <publicPort>| 7 | TCP,UDP | ECHO +0 | 162 | UDP | SNMP traps +1 | 22 | TCP,UDP | SSH +2 | 443 | TCP | HTTPS +2 | 161 | UDP | SNMP With this set, the localPort value should be 3 and portType should be cpemgrsecure. Public | Local Well | Type | Name Port | Known Port | | <publicPort>| 7 | TCP,UDP | ECHO +0 | 162 | UDP | SNMP traps +1 | 23 | TCP,UDP | Telnet +2 | 80 | TCP | HTTP +2 | 161 | UDP | SNMP With this set, the localPort value should be 3 and portType should be cpemgr. Public | Local Well | Type | Name Port | Known Port | | <publicPort>| 7 | TCP,UDP | ECHO +1 | 22 | TCP,UDP | SSH +2 | 161 | TCP,UDP | SNMP +3 | 443 | TCP | HTTPS +3 | 162 | UDP | SNMP traps With this set, the localPort value should be 4 and portType should be cpemgrsecure. Public | Local Well | Type | Name Port | Known Port | | <publicPort>| 7 | TCP,UDP | ECHO +1 | 23 | TCP,UDP | Telnet +2 | 161 | TCP,UDP | SNMP +3 | 80 | TCP | HTTP +3 | 162 | UDP | SNMP traps With this set, the localPort value should be 4 and portType should be cpemgr.