11-30-2011 02:59 AM - edited 03-04-2019 02:27 PM
Dear Experts,
Please guide me following ports i need to Forwarding to IP Address 192.168.11.61
The port details are as follows:
(1) TCP Port 22 (SSH)
(2) UDP Port 500 (ISAKMP)
(3) UDP Port 4500 (ISAKMP/NAT-Traversal)
(4) IP50 (AH)
(5) IP51 (ESP)
What is the command should i give and how can i apply in my router as per my above mention required ??
Thanks in Adv,
Solved! Go to Solution.
11-30-2011 03:51 AM
Hi,
which model of router? if it is an enterprise model and your outside interface is x.x.x.x then you could do something like this:
access-list 199 permit tcp host 192.168.11.61 eq 22 any
access-list 199 permit udp host 192.168.11.61 eq 500 any
access-list 199 permit udp host 192.168.11.61 eq 4500 any
access-list 199 permit esp host 192.168.11.61 any
access-list 199 permit ah host 192.168.11.61 any
route-map MY_SERVICES
match ip address 199
ip nat inside source static 192.168.11.61 x.x.x.x route-map MY_SERVICES
on inside interface: ip nat inside
on outside interface: ip nat outside
Regards.
Alain
11-30-2011 04:51 AM
Hi,
your outside public address.
Regards.
Alain
11-30-2011 03:51 AM
Hi,
which model of router? if it is an enterprise model and your outside interface is x.x.x.x then you could do something like this:
access-list 199 permit tcp host 192.168.11.61 eq 22 any
access-list 199 permit udp host 192.168.11.61 eq 500 any
access-list 199 permit udp host 192.168.11.61 eq 4500 any
access-list 199 permit esp host 192.168.11.61 any
access-list 199 permit ah host 192.168.11.61 any
route-map MY_SERVICES
match ip address 199
ip nat inside source static 192.168.11.61 x.x.x.x route-map MY_SERVICES
on inside interface: ip nat inside
on outside interface: ip nat outside
Regards.
Alain
11-30-2011 04:35 AM
Dear Alain,
Thanks so much some confusion pl clear me.
ip nat inside source static 192.168.11.61 x.x.x.x route-map MY_SERVICES ( here x.x.x.x means ??)
Thanks once again!!!
11-30-2011 04:51 AM
Hi,
your outside public address.
Regards.
Alain
11-30-2011 05:34 AM
Dear alain,
Thanks a lot i will try to config and then let you.
Have Cheers!!!
11-30-2011 08:59 AM
the command you will use is : ip nat inside source static tcp 192.168.11.61 22 1.1.1.1 22 1.1.1.1 22 extendable. thats an example of the configuration. you can neither use the interface associate with the public IP address listed in this command as 1.1.1.1 (as an example) or use the interface instead of the ip address. regards
---
Posted by WebUser Julio C. Padilla
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide