Hi John,

Thanks for the info. If I add the line:

ip nat inside source static 192.168.2.50 interface Dialer0

What effect will this have on traffic coming in to the external interface? Will it forward all traffic to 192.168.2.50, or just make the external interface aware that 192.168.2.50 is available for the port range that I open in the acl?

I should also mention that there are some other NAT rules, such as:

ip nat inside source static udp 192.168.2.30 45000 interface Dialer0 45000

ip nat inside source static tcp 192.168.2.115 25000 interface Dialer0 25000

These have an accompanying ACL entry, and I don't want any of this traffic to be affected by any new rules that I add.

Nick

Ah, yeah, that would make a difference because you're forwarding different ports to different addresses. I don't know if this will work, but you might try something like:

access-list 110 permit tcp any host 192.168.2.50 range

route-map INCOMING permit 10

match ip address 110

ip nat insid source static route-map INCOMING interface Dialer0

I don't have a way of testing this, but this is the way that you'd do it in an ASA. (sort of.) I'd do this after hours to see if it'd work for you though.

HTH,

John

I ended up creating a separate line for each entry, it didn't take that long in the end.

Thanks for your help

Nick