Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Destination Port Translation

Hi

I have only one usable public IP and i want to share multiple hosts inside the network on internet....

basically i want to forward the port 80 requests to host A and port 5900 requests to host B and i want to use only on public IP for both of the hosts....

can anybody guide me and provide me syntax for the same

??

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Blue

Re: Destination Port Translation

Hi

On a router where

host A = 192.168.5.1

host B = 192.168.5.10

Public ip address = 195.166.72.1

ip nat inside source static tcp 192.168.5.1 80 195.166.72.1 80

ip nat inside source static tcp 192.168.5.10 5999 195.166.72.1 5999

On a an ASA/Pix v7.x firewall it's essentially the same except the addresses re swapped around eg

static (inside,outside) tcp 195.166.72.1 80 192.168.5.1 80

static (inside,outside) tcp 195.166.72.1 5999 192.168.5.10 5999

Note on ASA/Pix if the public IP address you are using is the actual IP address assigned to the the outside interface you need to modfiy the statics

static (inside,outside) tcp interface 80 192.168.5.1 80

static (inside,outside) tcp interface 5999 192.168.5.10 5999

HTH

Jon

3 REPLIES
Hall of Fame Super Blue

Re: Destination Port Translation

What type of device are you doing this on - router or firewall ?

New Member

Re: Destination Port Translation

I am doing it on router 2801

i want to know if this can also be done firewall since it can be helpful...

Hall of Fame Super Blue

Re: Destination Port Translation

Hi

On a router where

host A = 192.168.5.1

host B = 192.168.5.10

Public ip address = 195.166.72.1

ip nat inside source static tcp 192.168.5.1 80 195.166.72.1 80

ip nat inside source static tcp 192.168.5.10 5999 195.166.72.1 5999

On a an ASA/Pix v7.x firewall it's essentially the same except the addresses re swapped around eg

static (inside,outside) tcp 195.166.72.1 80 192.168.5.1 80

static (inside,outside) tcp 195.166.72.1 5999 192.168.5.10 5999

Note on ASA/Pix if the public IP address you are using is the actual IP address assigned to the the outside interface you need to modfiy the statics

static (inside,outside) tcp interface 80 192.168.5.1 80

static (inside,outside) tcp interface 5999 192.168.5.10 5999

HTH

Jon

104
Views
0
Helpful
3
Replies
CreatePlease to create content