rule that permits port translation

Answered Question
Mar 16th, 2010

Was wondering if someone could help since I've never set up a rule that did a port translation, one of our groups has requested the following: they need a rule permits port 21 and translates it to port 2121  for the following IP 10.0.0.2. The ftp daemon is listening on port  2121 but they want to have normal port 21 activity.

I appreciate any advise.

I have this problem too.
0 votes
Correct Answer by Federico Coto F... about 6 years 10 months ago

Hi,

static (in,out) tcp x.x.x.x 21 10.0.0.2 2121

The above rule says that whenever incoming traffic reaches IP x.x.x.x on port 21, it will be redirected
to IP 10.0.0.2 on port 2121

You should also have an ACL permitting this traffic, for example:

access-list outside permit tcp any host x.x.x.x eq 21

Federico.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Federico Coto F... Tue, 03/16/2010 - 08:00

Hi,

static (in,out) tcp x.x.x.x 21 10.0.0.2 2121

The above rule says that whenever incoming traffic reaches IP x.x.x.x on port 21, it will be redirected
to IP 10.0.0.2 on port 2121

You should also have an ACL permitting this traffic, for example:

access-list outside permit tcp any host x.x.x.x eq 21

Federico.

Actions

This Discussion