cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
330
Views
0
Helpful
1
Replies

NAT Overloading: Restricting ports to a higher value?

steven.pw.lau
Level 1
Level 1

From the below, I've did a NAT overloading (IOS) for traffic going from 11.11.11.11 to 10.22.22.0/24. But having read in some doc that for icmp traffic, PAT will use ports starting from 0, I'm wondering if there's a way to set the port to a higher port value.

From the below debug, it is currently using port 80. Is there any way to restrict the port to a higher number, e.g. 1000+ ?

Thanks.

*Mar 3 03:32:23.751: NAT: map match test

*Mar 3 03:32:23.751: NAT: [0] Allocated Port for 11.11.11.11 -> 10.22.22.1: wanted 8 got 8

*Mar 3 03:32:23.755: NAT: i: icmp (11.11.11.11, 8) -> (10.22.22.2, 8) [40]

*Mar 3 03:32:23.759: NAT: s=11.11.11.11->10.22.22.1, d=10.22.22.2 [40]

1 Reply 1

amritpatek
Level 6
Level 6

This is not possible for ICMP traffic since selecting ports is only possible for TCP and UDP protocols.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: