- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-07-2016 04:27 AM - edited 03-05-2019 03:04 AM
We have 4 no. of internal servers need to access from outsite(internet) by using single public ip address. need NAT configuration for cisco router.
Solved! Go to Solution.
- Labels:
-
Other Routing
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-07-2016 06:20 AM
As I read the original post the requirement is that 4 servers in the private network need to be accessible from the Internet. If that is not correct than I hope that the original poster will provide correction. What they need to be accessible from the Internet is a static translation and not the dynamic/PAT that is suggested by Mark. And if there is only a single public IP address then it needs to be done with port forwarding where the port is identified and not by a simple static NAT. It might look something like this
ip nat inside source static tcp 10.1.2.250 25 1.2.3.4 25 extendable
ip nat inside source static tcp 10.1.2.251 80 1.2.3.4 80 extendable
ip nat inside source static tcp 10.1.2.252 110 1.2.3.4 110 extendable
ip nat inside source static tcp 10.1.2.253 443 1.2.3.4 443 extendable
Note that this works if each of the 4 servers provides a unique service but would not work if 2 of the servers are offering the same service (like 2 servers providing HTTP).
HTH
Rick
Rick
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-07-2016 05:47 AM
example
ip nat inside source list 111 interface fa4 overload
access-list 111 permit ip 192.168.0.0 0.0.0.255 any
ip nat inside -----on lan interface or vlan
ip nat outside----- on wan interface or dialer
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-07-2016 06:20 AM
As I read the original post the requirement is that 4 servers in the private network need to be accessible from the Internet. If that is not correct than I hope that the original poster will provide correction. What they need to be accessible from the Internet is a static translation and not the dynamic/PAT that is suggested by Mark. And if there is only a single public IP address then it needs to be done with port forwarding where the port is identified and not by a simple static NAT. It might look something like this
ip nat inside source static tcp 10.1.2.250 25 1.2.3.4 25 extendable
ip nat inside source static tcp 10.1.2.251 80 1.2.3.4 80 extendable
ip nat inside source static tcp 10.1.2.252 110 1.2.3.4 110 extendable
ip nat inside source static tcp 10.1.2.253 443 1.2.3.4 443 extendable
Note that this works if each of the 4 servers provides a unique service but would not work if 2 of the servers are offering the same service (like 2 servers providing HTTP).
HTH
Rick
Rick
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-07-2016 07:57 PM
Thanks Richards.....
