Port Forwarding

[mnu_pd2021]

Hi,

 I have two sites linked together with Strongswan. The network diagram is something like this 192.168.36.0/24 --- Cisco 891 ---INTERNET ---Ubuntu server --- 172.16.0.0/24. Both routers use static configured public IPs. The strongswan tunnel works as expected, for example I can access via web interface one of the equipments behind Cisco (192.168.36.2) from the computers behind Ubuntu.

 I want to access the same switch from the Internet with Port Forwarding (using port 40073). 

 So I add this:

  ip nat inside source static tcp 192.168.36.2 80 cisco_public_ip 40073 extendable

  Now I can access the switch from the Internet with: http://cisco_ip:40073 but I cannot access from the clients behind Ubuntu anymore (only if I remove the rule above). Any hints why ?

 Thanks in advance

[mnu_pd2021]

I found the solution searching this forum, it's called Conditional Port Forwarding. Everything works as expected.

[nagrajk1969]

Hi

Could you post with some details of the exact configs/commands used that solved your issue, or could atleast post the link to the solution you found out?

It would be very much helpful to all of us people who come across a similar issue in future and the details of your solution would be very much helpful to the community

thank you so much in advance

regards

[mnu_pd2021]

Hi nagrajk1969,  

 Look for "Conditional Port forwarding on Cisco"

https://blog.donlangham.com/2015/09/conditional-port-forwarding-nat-on.html

[nagrajk1969]

Thank you so much. God Bless You

regards