NAT Port Forward based on public source IP?

[Ruud van Strijp]

Hello,

I have one public IP address but multiple local servers that run on the same port. I cannot change the port the clients use to connect to this server, so I can't do a port map in my NAT router. The solution I had in mind, is to filter on source address. If a client from public IP X.X.X.X connects to port Z, I want it to go to internal server 10.10.10.10 and if a client from public IP Y.Y.Y.Y connects to port Z, I want it to go to internal server 10.20.20.20. Is this possible?

Thanks,

Ruud van Strijp

[smitesh kharecha]

Hi Ruud,

Are you planning to do this on Firewall or Router ?

I'm not too sure about this on Cisco Routers, but I think I have seen something like this on Cisco's cheif compititor (just that I don't want to take the name of the vendor )

Regards,

Smitesh

[fb_webuser]

http://www.cisco.com/en/US/docs/ios/12_2t/12_2t4/feature/guide/ftnatrt.html no sure but try this

---

Posted by WebUser Nika Pitskhelauri

[Ruud van Strijp]

Thanks for your replies. I am trying to do this with an ASA5510 or ASA5505. Would that be possible?

[smitesh kharecha]

Hi Rudd,

On Firewall it should work (although, I'm not good at firewall); but I'm saying this because of the fact that firewall keep session information (though now a days higher end router also do same) also.

I suggest to post thiss query in Firewall under Security forums.

Regards,

Smitesh