cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
267
Views
0
Helpful
1
Replies

1841 with Advanced Security IOS - Firewall questions

TalonKarrde
Level 1
Level 1

Hi all,

I am setting up a new 1841 router for a customer. We have a few public IP addresses on one range, of which I use one for the Outside interface, and the others are mapped by static NAT to internal IP addresses on the router LAN.

This part works ok, but I cant figure out how to configure access lists or the firewall policy to allow additional traffic to access these static nat hosts. I have tried putting the whole public subnet as the destination, the individual internet address as the destination and even the private lan ip as the destination, but none of these methods allows the traffic to work

(eg. opening 3389 for Terminal Services to any of those destinations from any host does not allow terminal services to work).

Can anyone please offer some advice on what I am doing wrong and how I might get this working properly?

Thanks

1 Reply 1

jackko
Level 7
Level 7

an inbound acl should be pointed to the public ip and the acl should be applied on the router public interface.

e.g.

access-list 111 permit tcp any host eq 3389

int d0

ip access-group 111 in