08-31-2013 03:02 AM - edited 03-04-2019 08:55 PM
Hi there,
i am using a service that requires certiain ports to be open for more then one client. untill now I have just had one client that needed the sevice and used
ip nat inside source static tcp 192.168.3.204 53 interface GigabitEthernet0/0 53 for all the ports I needed. This of course doesnt work with more then one cleint. how can i get around this?
Thanks
Solved! Go to Solution.
09-01-2013 07:52 AM
You won't be able to do this if you plan on using the same public address. The router will get confused because it won't know which host to send the traffic to. I can think of a couple of ways to get around this though. You could get public addresses to map to whatever you want on whatever ports you need, or you can change the public addressed port meaning that if you have 3 hosts on the lan that need to listen to port 53 and answer on those ports because they can't be changed for whatever reason, you can have a single public address mapped to 1153, 1154, and 1155 for example. Then you could port translations inbound as well as the address:
ip nat inside source static tcp 192.168.3.204 53 interface g0/0 1153
ip nat inside source static tcp 192.168.3.205 53 interface g0/0 1154
ip nat inside source static tcp 192.168.3.206 53 interface g0/0 1155
Obviously for that to work you would need the services on the outside come in on the appropriate port that would map to the correct server. Another way would be to get a dedicated block of addresses.
HTH,
John
*** Please rate all useful posts ***
09-01-2013 07:52 AM
You won't be able to do this if you plan on using the same public address. The router will get confused because it won't know which host to send the traffic to. I can think of a couple of ways to get around this though. You could get public addresses to map to whatever you want on whatever ports you need, or you can change the public addressed port meaning that if you have 3 hosts on the lan that need to listen to port 53 and answer on those ports because they can't be changed for whatever reason, you can have a single public address mapped to 1153, 1154, and 1155 for example. Then you could port translations inbound as well as the address:
ip nat inside source static tcp 192.168.3.204 53 interface g0/0 1153
ip nat inside source static tcp 192.168.3.205 53 interface g0/0 1154
ip nat inside source static tcp 192.168.3.206 53 interface g0/0 1155
Obviously for that to work you would need the services on the outside come in on the appropriate port that would map to the correct server. Another way would be to get a dedicated block of addresses.
HTH,
John
*** Please rate all useful posts ***
09-03-2013 12:34 PM
Thanks that worked
Sent from Cisco Technical Support iPad App
09-02-2013 11:58 PM
If my understanding of the problem is correct, then this can be solved using the rotary option, check this link
http://www.cisco.com/en/US/technologies/tk648/tk361/tk438/technologies_white_paper09186a0080091cb9.html
Sent from Cisco Technical Support iPhone App
09-03-2013 12:34 PM
I will try this also Thank you.
Sent from Cisco Technical Support iPad App
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide