NAT/PAT port redirection

[btillmanngc]

I hope i ask this correclty.

I have one host IP address 192.168.3.50/24 that I need to connect to serveral inside hosts 10.10.10.1-8 via https and ssh.

ip nat inside source static tcp 10.10.10.1 443 192.168.3.50 443 extendable <-- This works fine. And any one to one works as well

ip nat inside source static tcp 10.10.10.3 443 192.168.3.50 22222 extendable <-- I can get the SSL certificate but receive RFC 5746, see CVE-2009-3555 error when the login page tries to pull up. But works fine certificates and all when in a one to one translateion.

I'm not sure if I need a route-map to translate 443 back out to source?

[btillmanngc]

here's an show ip nat translation... just not sure why the https or SSL connection would hang..

Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.3.50:443   10.10.10.1:443     ---                ---
tcp 192.168.3.50:65003 10.10.10.3:443     192.168.1.111:35562 192.168.1.111:35562
tcp 192.168.3.50:65003 10.10.10.3:443     192.168.1.111:35563 192.168.1.111:35563
tcp 192.168.3.50:65003 10.10.10.3:443     ---                ---