topic Re: RDP access from using PAT in Network Security

RDP access from using PAT

Himanshu_Dwivedi — Fri, 31 Mar 2023 17:08:10 GMT

Hello,

I am using Cisco Firepower FTD 1010, the idea is to understand how to Access RDP from HOST A to HOST B and vice versa.

The Idea is to Use NAT OVERLOAD from Inside to Outside (PAT) and Outside to Inside.

Re: RDP access from using PAT

Rob Ingram — Fri, 31 Mar 2023 17:12:20 GMT

@Himanshu_Dwivedi try the following (amending accordingly to fit your environment).

Also create an ACP rule that permits the traffic. make sure you use the real IP address of Host B not the translated IP address

Re: RDP access from using PAT

Himanshu_Dwivedi — Fri, 31 Mar 2023 17:24:43 GMT

Thanks for your reply, is this NAT Rule for Vice Versa RDP access.

As per this rule I can see that Host B can simply RDP to Host A with Actual IP, but what IP will Host A will use to RDP to Host B.

Re: RDP access from using PAT

Rob Ingram — Fri, 31 Mar 2023 17:28:05 GMT

@Himanshu_Dwivedi no, Host B will be translated behind the outside interface IP address (as per your requirement).

Host A would connect to the NAT ip address not the real IP address. In this example traffic is being translated behind the outside interface IP address (192.168.15.170), but you could define a different IP address in 192.168.15.x network if you wished.

Re: RDP access from using PAT

MHM Cisco World — Fri, 31 Mar 2023 18:00:40 GMT

HostA can access real IP of HostB

HostB can access use mapped ip of HostA

The frp will nating it to real ip of HostA

Note:- NAT overload not work here it unidirectional you need static PAT 1:1 since it bidirectional