Help with NAT using specific ports.

[Russell Stamey]

Hello,

I have a customer who is requesting that we allow inside host 10.1.31.10  over ports 5060, 4569, and 10000-20000 to connect to remote host 201.63.34.87. The inside host should NAT to 201.94.234.23

I have an idea on how to do this using route-maps. Could someone please show me the correct way to do this?

Thank You,

Russell Stamey

[AhmedSonba]

Dear Russell,

you will need to do the following to archive the above scenario :

First Access List for the range of the 1000 - 2000

access-list 100 permit udp host 10.1.31.10 host 201.63.34.87 range 1000 2000

and another Access list for the 5060 and 4569 Ports

access-list 100 permit udp host 10.1.31.10 host 201.63.34.87  5060

access-list 100 permit udp host 10.1.31.10 host 201.63.34.87  5060

Than it comes to the NAT commands

ip nat inside source list 100 interface " your out side nat interface, EX fastethernet 0/1 "  overload

and at the end the

ip nat outside

and the

ip nat inside

please refer to the following link for more information about NAT

http://www.cisco.com/en/US/technologies/tk648/tk361/tk438/technologies_white_paper09186a0080091cb9.html

Hope it will help

Ahmed Sonba

[Russell Stamey]

Thank you so much. This really helped me to understand this. The CCNA material explained NAT only to a certain extent.

Thank you again.

[Muhammad Thanveer]

Please rate the helpfull replies, they may help someone who is looking for same scenario

Regards
Thanveer
"Everybody is genius. But if you judge a fish by its ability to climb a tree, it will live its whole life believing that it is a stupid."