ip nat inside source

[pgamage]

I am forwarding my web traffic from out side to inside web server by this command.

ip nat inside source static tcp x.x.x.x y.y.y.y

Is it possible to do the same with

ip nat inside source static ip x.x.x.x y.y.y.y        ?

[John Blakley]

You can do a 1 - 1 mapping with

ip nat inside source static x.x.x.x y.y.y.y

Then you'll control what comes through with an acl. You can have both entries in at the same time, but it's not necessary. What doesn't match on your port translations will get caught by your static mapping, so you might as well just have the static mapping if you're going to go that route.

If you're just wanting to allow udp ports in (because you asked about "ip"), you can do the same as you're now doing with tcp:

ip nat inside sourc static udp x.x.x.x port y.y.y.y port

HTH,

John

[pgamage]

thats means

ip nat inside source static ip x.x.x.x y.y.y.y traslates TCP traffic as well? not just IP only trafic such as ICMP?

[cadet alain · Accepted solution]

Hi,

yes everything that uses IP: icmp, udp, tcp

Regards.

Alain.

Don't forget to rate helpful posts.