Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

SA 540 Port forwarding

I have 5 static IPs from my isp and want to forward traffic from each IP to an internal NAT'ed IP.

MY SA 540-K9 is on 192.168.10.1 (the SA 540-K9 is not handling DHCP)

My DHCP server is on 192.168.10.2 and has vpn and sharepoint running fine on it.  I had an old Dlink firewall router that handled the port forwarding fine, it was just very very slow so we bought this SA 540-K9

I want to send all trafic from the following external IPs to the internal Nat'ed IPs

64.254.125.146 to 192.168.10.254 all ports for a VOIP phone system

64.254.125.147 to 192.168.10.2 port 1723 or  to allow windows vpn clients to vpn to a windows 2003 server

64.254.125.148 to 192.168.10.250 all ports

64.254.125.148 to 192.168.10.251 all ports

64.254.125.146 to 192.168.10.254 port 80 to allow web browser access to sharpoint running a windows 2003 server

The VOIP phone system works great, but no other firewall rules are allowing access.

Is there a place I need to add the additional WAN IPs before they can be added in the firewall rules since the only static IP in the SA 540-K9 is 64.254.125.146 as the WAN port and I am using that IP for the VOIP phone system.

Here is my current IPV4 firewall rules.

StatusFrom ZoneTo ZoneServiceActionSource HostsDestination HostsLocal ServerInternet DestinationLogEdit

EnabledWANLANPPTPALLOW alwaysAny192.168.10.2:172364.254.125.147Never
EnabledWANLANANYALLOW alwaysAny192.168.10.25064.254.125.148Never
EnabledWANLANANYALLOW alwaysAny192.168.10.25164.254.125.149Never
EnabledWANLANANYALLOW alwaysAny192.168.10.25464.254.125.146Never
EnabledWANLANANYALLOW alwaysAny192.168.10.2:8064.254.125.150Never

Thank you for any help,

Rob

  • Small Business Security
1 REPLY

Re: SA 540 Port forwarding

This is a known issue.  Please upgrade to the 1.0.39 firmware to fix this.  Also, read the release notes.  Upgrading to that version will require a factory default because of significant database changes.

1659
Views
0
Helpful
1
Replies