topic How to Nat Multiple FTP Local Servers from one Single IP in Network Security

How to Nat Multiple FTP Local Servers from one Single IP

Hari Kumar Raja — Tue, 12 Mar 2019 01:34:36 GMT

Dear Team,

I have a FTP server at my local network and i have natted the private IP with my Public IP using default FTP Port ( 21) , now i have created Diffrent FTP Account in my server using port 2121 and i am able to login using the private IP with port 2121 , now i want to nat with my public IP with port 2121 and i failed , can any one help me to fix this issue ASAP.

1) 125.x.x.x --------- 10.10.1.x : 21 ( Able to access from external network)

2) 125.x.x.x ---------- 10.10.1.x : 2121 ( not able to login from external network and able to login internally )

Please help me.

Thanks

Hari

Re: How to Nat Multiple FTP Local Servers from one Single IP

Yadhu Tony — Thu, 25 Apr 2013 10:27:58 GMT

Hi Hari,

Post your NAT config. What is the output of 'sh ip nat translations' command?

Regards,
Tony

http://blog.yadhutony.com

How to Nat Multiple FTP Local Servers from one Single IP

Hari Kumar Raja — Thu, 25 Apr 2013 13:25:47 GMT

Hi Tony,

Please find the nat details below , as informed you in my previous mail , i am able to access the ftp account using locally , i have natted the default ftp port 21 with public interface and i am able to login , when i change the port to 2121 i am able to login locally , but with public IP i cannot .

Nat from Original FTP Port : able to Login with public IP

(inside) to (outside) source static NAT_HOST_10.10.1.18_TCP_FTP HOST_125.62.xxx.xx service tcp ftp ftp

translate_hits = 0, untranslate_hits = 0

I want to nat with same public IP but the port would be 2121

please let me know how i need to give a nat here and i am new for this subject.

Thanks

Hari

How to Nat Multiple FTP Local Servers from one Single IP

Hari Kumar Raja — Thu, 25 Apr 2013 13:26:38 GMT

On a diffrent not the command " sh ip nat translations " is not working in my asa console.

Thanks

Hari

How to Nat Multiple FTP Local Servers from one Single IP

Julio Carvajal — Fri, 26 Apr 2013 04:38:11 GMT

Hello

Entire configuration please

Re: How to Nat Multiple FTP Local Servers from one Single IP

Yadhu Tony — Fri, 26 Apr 2013 05:23:07 GMT

Hi Hari,

OK. 'sh ip nat transaltion' will only work on routers.

In your NAT config ftp is port mapped to 21 and not to 2121. Inorder to work we need to mention port 2121.

Try this syntax:

object network 
 host 
 nat (inside,outside) static  service tcp  

[Hope you are using version 8.3 or latter.]

Here when hosts on the outside establish a connection to 125.62.x.x on TCP port 2121, It will be translated to destination IP address 10.10.1.x on TCP port 2121.

Also in your ACL mention port 2121. Let me know how it works.

Regards,
Tony

http://yadhutony.blogspot.com

How to Nat Multiple FTP Local Servers from one Single IP

Hari Kumar Raja — Fri, 26 Apr 2013 07:06:01 GMT

Hi Tony,

I have tested the same but no luck .

Thanks

Hari

How to Nat Multiple FTP Local Servers from one Single IP

Yadhu Tony — Fri, 26 Apr 2013 10:23:55 GMT

Please post the entire config.

Regards,
Tony

http://yadhutony.blogspot.com