Port Redirection

[cabell911]

I have a particular application that needs to communicate with a server on port 10367 over the internet. The host that this application is on is behind our firewall being PAT'ed to a public IP. The problem is, the server it contacts apparently wants to contact it back on the same port. It doesnt work though and I have tried setting up port redirection for that particular port to no avail. Any help/suggestions would be appreciated.

[stomasko]

PAT changes the port number. Try doing a static statement giving that host a real world ip instead of using PAT. Check the webpage below for some ideas.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094aad.shtml

Hope this helps.

Steve

[tvanginneken]

Hi,

PAT changes the tcp/udp source port, so if you don't want that the source port is changed, you cann't use PAT.

The solution to this problem is to create static one-to-one translation for each host that tries to connect to the server on the outside. With static translation the source port is not changed.

One big disadvantage of this solution is that you will need a different outside (public) IP address for each inside host that connects to the server.

Regards,

Tom

[cabell911]

Thanks for the replies.