Cisco router PAT port status closed

[hamzakoleripoyil]

Hi Guys,

As you see the below configuration,  I want to be able to access a device  (192.168.1.100) using port 7331 and 7332  from outside the network using the external ip address and port 7331 and 7332. But when I tried to check the port status using online port scanner tool, status shows "closed". Any help on this matter will be highly appreciated.

no aaa new-model
ip cef
!
!
!
!
ip name-server x.x.x.x
ip name-server x.x.x.x
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
!
!
!
controller DSL 0/0/0
line-term cpe
!
!
!
!
!
interface FastEthernet0/0
ip address 85.208.x.x 255.255.255.252
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 192.168.1.20 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 85.208.x.x
!
ip dns server
!
ip http server
no ip http secure-server
ip nat inside source list 101 interface FastEthernet0/0 overload
ip nat inside source static tcp 192.168.1.100 7331 85.208.x.x 7331 extendable
ip nat inside source static tcp 192.168.1.100 7332 85.208.x.x 7332 extendable
!
!
!
!
control-plane
!
!
!
line con 0
line aux 0
line vty 0 4

[Georg Pauwen]

Do you have any sort of firewall or virusscanner enabled on the machine with IP address 192.168.1.30 ? I googled around and found that TCP ports 7331 and 7332 are flagged as ports that could potentially be used as Trojan or Virus ports.

Can you try and map the inside ports to some port other than 7331 and 7332 ?

[hamzakoleripoyil]

Hi George, 

Thanks for the reply.

No virus scanner enabled on this machine. I will try another port on sunday as i am out of office now.