Port Redirection: Traffic redirection from WAN to LAN on CISCO 4321 Router

[Reza_Mohd]

Hi,

I'm looking for help on port redirection as traffic coming on WAN interface should redirect to another LAN IP on another port. I'm using CISCO 4321 router.

e.g: WAN IP: 1.1.1.1

       LAN IP: 10.10.10.10:443

Any help will be highly appreciated.

Regards

Reza

[paul driver]

Hello

First of all are you using network translation between your LAN/WAN?

res

Paul

[Steven Case, MBA-ITM]

Paul has already told you the solution: NAT.

First, specify your outside port as outside and inside as inside:

int gi 0/0

ip nat outside

description "ISP Uplink - WAN"

ip address 1.1.1.2 255.255.255.248

!

int gi 0/1

ip nat inside

description "Internal Network - LAN"

ip address 10.10.10.1 255.255.255.0

!

Now, if I'm reading this right, you are assuming that all traffic coming into 10.10.10.10 should be forwarded to 443? This will likely need another appliance, and the internet generally won't pass through much of anything beyond 80, 443, 25, etc. through a browser, so NAT can be simple:

ip nat inside source static 10.10.10.10 1.1.1.1

Translating ports is something I have zero experience with, so if this is what you're looking for I'm out. :-) 

[Georg Pauwen]

On a side note, if you just want to redirect TCP port 443, use the statement below:

ip nat inside source static tcp 10.10.10.10 443 1.1.1.1 443 extendable

[Deepak Kumar]

Hi,

You didn't mention that WAN Port number. So I am assuming that your WAN port number as 8000. Means you are trying to access your internal Server from the outside with below URL

https://1.1.1.1:8000

and your internal server is working on 443

So your DNAT configuration will:

ip nat inside source static TCP 10.10.10.10 443 1.1.1.1 8000 extendable

Regards,

Deepak Kumar