Port_Forwarding

[Arif]

Hi;

I have Cisco 5516-x Firewall. I want to permit access to specific devices from outside via specific ports. Where and how can I set requiring settings on this firewall. Thanks... 

[Marvin Rhoads]

It would via via an access-list on the outside interface.

If you have NAT, you would specify the destination host's real IP address, not the public NAT address.

[Jaderson Pessoa]

Hello, you can do it though NAT configuration, like exemple below:

ip nat inside source static x.x.x.x (ip public) xx (port) x.x.x.x (local ip) xx (port)

[Arif]

Hi;

Can I achive this from gui (I don't know cisco commands too much). Can I use NAT tab on firewall (see attachment please). I think I should set "original source" : any and "translated source" : My DVR's local IP. am I think true ? Thanks...

[Jaderson Pessoa]

Can I achive this from gui (I don't know cisco commands too much). Can I use NAT tab on firewall (see attachment please). I think I should set "original source" : any and "translated source" : My DVR's local IP. am I think true ? Yes, it is your local dvr ip Thanks...

original source: public ip address / interface and port

translated address: local ip of your dvr and port

check this, i hope that it can help you better: https://www.cisco.com/c/en/us/support/docs/smb/switches/cisco-350-series-managed-switches/smb5273-configure-acl-on-an-sx350-series-managed-switch-using-the-ac.html

[Arif]

Hi;

I can't select "public ip address" as "any" from Auto NAT rule, Only from Manual NAT rule I can select public ip as "any". In that case what should "original destination" is (can't select any from here). Thanks...