Simple PAT problem

Unanswered Question
Jul 24th, 2008
User Badges:

Im using a Cisco 877 and I have one global IP address, and inside local network on I have one machine which is a VNC server, RDP server, and video recorder which uses a range of ports. I would like to forward all these ports to that one server and was wondering how to configure it. I also have a subnet on the network, which needs access to the internet via the cisco 877.

Can anyone give me some advice on the best way to set it up?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Collin Clark Thu, 07/24/2008 - 07:34
User Badges:
  • Purple, 4500 points or more

First setup a NAT translation from the outside to the inside server.

ip nat inside source static tcp 3389 interface Dialer0 3389

ip nat inside source static tcp 5900 interface Dialer0 5900

Do the same for the ports for your video recorder. Add the ports to your outside ACL.

For adding the network, just add the network to your ACL or NAT statement (depends on how it is currently configured). If you're using a different interface, don't forget to add ip nat inside under the interface.

Hope that helps.

crmljc1976 Thu, 07/24/2008 - 07:45
User Badges:

would my outside acl look something like this?

access-list 102 permit tcp any host wanip eq 3389.

Do I need to apply that to the interface too using access-group 102 in?

crmljc1976 Thu, 07/24/2008 - 08:06
User Badges:

when I do this all outbound from and is blocked. How do I resolve this?

Collin Clark Thu, 07/24/2008 - 08:17
User Badges:
  • Purple, 4500 points or more

Blocked? What are you seeing in the logs?

crmljc1976 Thu, 07/24/2008 - 10:43
User Badges:

I must have my access lists wrong,

I have been entering access-list 101 permit tcp any host eq 3389 which is the internal host instead of...

access-list 101 permit tcp any host dialer0 IP eq 3389

Collin Clark Thu, 07/24/2008 - 10:49
User Badges:
  • Purple, 4500 points or more

It should be the public IP address or if you get the IP dynamically, you'll have to use the any keyword again.


This Discussion