topic Re: Allow port 22 access from source WAN IP to destination WAN IP going through to internal LAN IP of the server in Network Access Control

Allow port 22 access from source WAN IP to destination WAN IP going through to internal LAN IP of the server

Rizwan2021 — Mon, 17 May 2021 01:18:44 GMT

Hi Guys,

I am reaching out for some help in making some configuring changes to a cisco 2901 router.
I am looking to make a firewall change to allow SFTP (port 22) access on 27.127.192.15 through to 10.0.80.12 server from WAN IP 13.236.8.103.

Would highly appreciate any assistance on what commands would I need to add into the router's configuration to achieve the above objectives.

Re: Allow port 22 access from source WAN IP to destination WAN IP going through to internal LAN IP of the server

balaji.bandi — Mon, 17 May 2021 09:40:57 GMT

You can use below command for port-foward :

ip nat inside source static tcp 10.0.80.1 22 27.127.192.15 22

if you like restrict IP - 13.236.8.103

interface Gi x/x
 ip access-group 110 in
!
access-list 110 permit host 13.236.8.103 eq ssh

here is reference for NAT and ACL

https://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/13772-12.html

https://www.cisco.com/c/en/us/support/docs/ip/access-lists/26448-ACLsamples.html