Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
New Member

need to telnet to device inside FW from internet.

I have a 1720 running 12.1(5) ip/fw ipsec and am overloading nat to the outside interface. I have a vendor on the outside that needs to be able to telnet to a server on private address space Do I need to use a static NAT trans to this server? Is there someway to forward this telenet request to the server? Not sure how to handle this.

Cisco Employee

Re: need to telnet to device inside FW from internet. need to use the static NAT mapping (actually its static PAT too) Lets say the outside ip address is and inside network is ( .1 to .4) then in order to telnet from outside to inside privet ip address, the PC which is on the internet has fo fire request for telnet not on the port 23 for but on different ports statically. That ports are mapped to the port 23 on the inside ip this

ip nat inside source static tcp 23 1023 extendable

ip nat inside source static tcp 23 2023 extendable

so forth

So if the router see the request for tcp port 1023 on ip address (outside), it will conver that to port 23 on inside ip address

But for that client side has to initiate the telnet request for port 1023 on ip to get to

Hope this helps.

CreatePlease to create content