Hi all,
I am using a cisco1841 router.
I specify a static NAT for one of my servers as below and is able to access the below server from external using remote desktop
ip nat inside source static tcp 192.168.91.1 3389 1.1.1.1 3389 extendable
I also enable remote access vpn on my cisco1841.
I am able to access other services on my 192.168.91.1 server after establishing my vpn connection except tcp port 3389(remote desktop).
If i remove the static NAT for port 3389 for this server, i would be able to access it at port 3389 after my vpn connection.
Why is this so? Pls advise. Thks in advance.
Below is other config found in my 1841. Pls note the 1st deny statement in my accesslist 110 is to enable NAT exemption for traffic from my internal to vpn ip(10.0.0.0/8)
access-list 100 permit tcp any host 1.1.1.1 eq 3389
interface Dialer
mtu 1492
ip address negotiated
ip access-group 100 in
ip nat outside
ip virtual-reassembly
encapsulation ppp
no ip mroute-cache
dialer pool 1
dialer-group 1
no cdp enable
crypto map VPN
ip nat inside source route-map nonat interface Dialer overload
access-list 110 deny ip 192.168.91.0 0.0.0.255 10.0.0.0 0.255.255.255
access-list 110 permit ip 192.168.91.0 0.0.0.255 any
route-map nonat permit 10
match ip address 110
