How to configure internal Server port translate on cEdge ?

[Rps-Cheers]

Hello,

We need configure end user internal server tcp443 port translate to cEdge interface tcp 4433 (there is only one public ip address), how to do it ?

The same commands of IOS:

 ip nat outside
 ip nat inside
ip nat inside source static tcp 172.16.x.x 443 100.1.1.1 4433 extendable

[Flavio Miranda]

Hi

 What you need is called PAT (Port address translation) where you keep one IP address and  differentiate services buy TCP ports.

The question I have is, where are you going to apply this PAT? It will be on the Router itself?

[Rps-Cheers]

Yes，its PAT.

In addition to doing it on the edge, can it be done on other devices? (Only one edge has no other devices, the switch connected downstream the edge)

Do you know how to configure？

[Flavio Miranda]

Well, PAT or NAT requires one interface to be inside and one interface to be outside. I mean, the device that perform NAT/PAT is meant to be before the target device. If I understude you well, you want to perform NAT but you have only the router itself. I dont think it is possible.

 What  you can do is change HTTPS port from 443 to 4443 internaly.

conf t

ip http sercure-port 4443

[Rps-Cheers · Accepted solution]

I think you misunderstood what I meant. I want to map the internal server's port mirroring to another TCP port on the router's public network interface on the router. Instead of modifying the ports for the default protocol on the router, and this is an Edge device in SDWAN, not a traditional IOS router configuration.
I confirmed with Cisco that cEdge will not support this function for the time being, and it needs to be supported in a later version. Currently vEdge should support this feature.
Anyway, thanks for your help, thanks.

[Rps-Cheers]

Port-Forwarding from Transport VPN to Service VPN not availble on cedge but available on vedge.
CSCvx65075

Customer Visible

Notifications

Save Bug

Open Support Case

Description

Symptom: Port-Forwarding is not supported on cedge devices and missing basic functionality which for users having webserver in Service VPN cannot connect from Internet. Conditions: Not supported feature. Workaround: NA Further Problem Description: Scenario : Internet -> cEdge VPN0 public IP TCP port 80 -> VPN10 local IP 192.168.10.5 TCP port 80. In case we have public IP address at the VPN0 interface of my ISR router with RFC1918 IP addresses for VPN1, like 192.168.1.0/24. There is a web server in VPN1, for example 192.168.1.100. we cannot forward TCP ports 80 and 443 from outside public IP to this web server. This web server should be accessible from the Internet.(this is supported in vedge)