Port for Remote desktop behind the router

[imranraheel]

I have to use my system placed behind cisco router.Router have public IP where as system have local IP i want to access thsi system from out side.Is the below commands correct

ip nat inside source static tcp 10.0.0.5 3389 137.154.155.21 3389

Here 10.0.0.5 is system Ip and 137.154.155.21 is the router Ip is this correct

[Collin Clark]

Yes, don't forget to add ACL rules to allow the traffic.

HTH and please rate.

[imranraheel]

well which ACL should i make plz explain

[Collin Clark]

Something like this-

access-list outside_access permit tcp any {public IP} eq 3389

[From your outside interface] ip access-group outside_access in

The 1st command permits traffic on port TCP 3389, the second apply's the ACL to an interface with a direction.

HTH and please rate.