Looking for confirmation I can do this. 1841 has 2 interfaces: FE 0/0 and FE 0/1. 0/0 is WAN w/public IP of 65.183.46.182. LAN is FE 0/1 with 192.168.1.1. Currently have users using browser-based access to IP cameras by http://65.183.46.182:xxxx, where xxxx is replaced by the port number mapped to each individual IP camera. Sounds like the hard way to do it, but there ARE reasons for doing it this way.
Command is:
Router1(config)#ip access-list extended BasicNAT
Router1(config-ext-nacl)#3 deny ip host 192.168.1.101 any
Router1(config-ext-nacl)#4 deny ip host 192.168.1.102 any
Router1(config-ext-nacl)#exit
Router1(config)#ip nat inside source static tcp 192.168.1.101 9101 65.183.46.182 9101
Router1(config)#ip nat inside source static tcp 192.168.1.102 9102 65.183.46.182 9104
Select Users want to be able to control the Air Conditioner via their web browser, as well. The program used to control uses TCP ports 3011, 1911 and 80. I do not want to map port 80 on this WAN ip to the air conditioner.
Can I use another one of the public IPs assigned by the T1 ISP provider? For example, NAT 65.183.46.181 to the LAN IP? Then, users will go http://65.183.46.181 and ports 80, 3011, and 1911 will work? Or, do I need a 3rd FE interface to make this happen?
