SSH port forwarding to router?

[jeff.bankston]

We use SecureCRT to make SSH vpn connections to our routers remotely. Is it possible to have the router perform port forwarding thru this vpn connection to a server on the router's internal network?

I ask this because SSH connections are the only possible way for us to make these remote connections, IPSec or PPTP client connections are blocked at the firewall. I know I can install an SSH server inside that network to accomplish this, but we can't install 250 SSH servers.

Thanks, Jeff

[micah]

Your question is somewhat vague as to your current setup. To simply forward port 22... Yes this can be done... You can do this quite easily with NAT.

ip nat inside source static tcp 10.0.0.1 22 202.202.202.2 22

Now, if you have a bunch of boxes you need to ssh to you can still use one IP address and specify ports in your SSH client.

ip nat inside source static tcp 10.0.0.1 22 202.202.202.2 1030

ip nat inside source static tcp 10.0.0.2 22 202.202.202.2 1031

ip nat inside source static tcp 10.0.0.3 22 202.202.202.2 1032

See the following link for more information...

http://cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080094e77.shtml