Port forwarding in Cisco ISR 2811

[#1]

Hi I have a Cisco ISR2811 running advanced ip services with CME and CUE in it.

I need to Port forward from the outside to the inside port 22 for SSH.

example outside ip address 1.1.1.1 inside ip address 10.100.100.10

I know I need the command

ip nat inside source static tcp <private ip> 22 <public ip> 22

However on my ACL to permit this.

would I permit from my outside IP address or from the remote site I want to be able to access this.

and then do I apply that ACL to the FA0/0 which is the public interface as ACL 101 inbound

thank in advance

[Jon Marshall]

Greg

Your acl would look like

access-list 101 permit tcp host eq 22

and then yes you apply it inbound on the outside interface.

Jon

[#3]

Thanks Jon I will give that a try next week.