Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Static NAT to private IP server while having a public IP DMZ


I have a situation where we have an application server on our internal network. I have a terminal server on the same network that is used to access this application server via a client program installed on the terminal server. I need to give external users at home access to this terminal server so they can work from offsite.

We also use VoIP, and our gateway router supplying the internet connection to the office also has a DMZ port where all of our VoIP gateways reside with their public IPs.





|DMZ - Public IP|

The solution I'm thinking of would be to static map TCP port 3389 of the public IP to the terminal server's private IP.

I want to use the configuration settings from this Cisco tutorial (link below), but I'm not too sure about the affects of having NAT turned on will have on our VoIP DMZ, and I don't have a test router to check on.

Would it be safe to proceed with the way the tutorial has the NAT implementation outlined, or would additional configs need to be made? Thanks.


Re: Static NAT to private IP server while having a public IP DMZ

NAT will be effective for the traffic that goes between the inside and outside interfaces. Since you will not be implementing it for the DMZ, I don't foresee any problem in this case.