cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1071
Views
0
Helpful
1
Replies

Cisco 887 Conditional Port Forwarding

Asagohan
Level 1
Level 1

I have port forwarding configured on a CISCO 887 for client VPN like this: "ip nat inside source static udp 10.65.1.1 500 interface Loopback1 500" It forwards them to a Windows RRAS server.

 

However, now I am trying to set up a site-site VPN, but the tunnel fails to activate because port 500 is being forwarded to the RRAS server instead of using the Tunnel. I can't remove it because then users can't log in.

 

I have read that I should use route-map like this: "ip nat inside source static udp 10.65.1.1 500 interface Loopback1 500 route-map my_route_map" And my_route_map would permit which addresses the forwarding would apply to. However, the router does not seem to recognize this command.

 

There is this command: "ip nat inside source route-map my_route_map interface Loopback1 overload", but I don't think this controls port forwarding.

 

Is there a way I can achieve port forwarding, but only for specific source addresses? i.e. if it is from a certain IP, don't forward it, otherwise do forward.

1 Reply 1

balaji.bandi
Hall of Fame
Hall of Fame

Not sure that can be achieveble as per i know. (with the single IP address and same interface).

 

but you can do different approach : (example for ASA, but should work similar way on Router).

 

https://community.cisco.com/t5/vpn/port-forwarding-for-anyconnect-having-an-impact-on-ipsec/m-p/3703898#M146434

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help