nat port-range forwarding

[anthonyfear]

Hi All

I'm trying to find a way to forward a range of ports through my nat.

I know how to forward individual ports with command like :

ip nat inside source static tcp 192.168.4.8 1723 interface Dialer0 1723

but how can I forward a range or ports?

I'm using an 857.

Thanks in advance

[nikolay-shopik]

Here is example how you can acomplish such thing.

ip nat pool ms-exchange 192.168.1.100 192.168.1.100 netmask 255.255.255.0 type rotary

ip nat inside destination list 150 pool ms-exchange

access-list 150 permit tcp any any range 49521 65535

[anthonyfear]

thanks for that - I still can't get ti working but that might be because i have the wrong port range.

Is there a way i can see what incoming traffic is trying to get through? So I can identify the correct ports?

[nikolay-shopik]

create access-list and enable

debug ip access-list number detail

don't forget enable ip route-cache flow on interface