rule that permits port translation

Answered Question
Mar 16th, 2010
User Badges:

Was wondering if someone could help since I've never set up a rule that did a port translation, one of our groups has requested the following: they need a rule permits port 21 and translates it to port 2121  for the following IP 10.0.0.2. The ftp daemon is listening on port  2121 but they want to have normal port 21 activity.


I appreciate any advise.

Correct Answer by Federico Coto F... about 7 years 2 months ago

Hi,


static (in,out) tcp x.x.x.x 21 10.0.0.2 2121

The above rule says that whenever incoming traffic reaches IP x.x.x.x on port 21, it will be redirected
to IP 10.0.0.2 on port 2121

You should also have an ACL permitting this traffic, for example:


access-list outside permit tcp any host x.x.x.x eq 21


Federico.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Federico Coto F... Tue, 03/16/2010 - 08:00
User Badges:
  • Green, 3000 points or more

Hi,


static (in,out) tcp x.x.x.x 21 10.0.0.2 2121

The above rule says that whenever incoming traffic reaches IP x.x.x.x on port 21, it will be redirected
to IP 10.0.0.2 on port 2121

You should also have an ACL permitting this traffic, for example:


access-list outside permit tcp any host x.x.x.x eq 21


Federico.

Actions

This Discussion