How to enable port forwarding to get some TCP services

[Raheel qaiser]

As Attachment snap showing the scenario, i need a suggestion to get (http/https/pop3/smtp) access for the network(192.168.0.9)  through the internet server(192.168.0.123) placed on the other side of my router(LDC_Sharaf Router).

Basic routing is enabled for network convergence between both routers and both inside local hosts can access each others.

Please suggest a solution.

[julijime]

Hi Raheel,

The following link has a good explanation and example on how to configure this using NAT:

http://www.cisco.com/c/en/us/support/docs/long-reach-ethernet-lre-digital-subscriber-line-xdsl/asymmetric-digital-subscriber-line-adsl/12905-827spat.html

HTH,

Julio

[Masoud Pourshabanian]

Hello,

ip nat inside source static tcp 192.168.0.123 80 192.168.200.1  80  (for http)

ip nat inside source static tcp 192.168.0.123 443 192.168.200.1  443  (for https)

ip nat inside source static tcp 192.168.0.123 25 192.168.200.1  25  (for smtp)

and so on

Router LCD-sharaf

interface x.x

description toward server

ip address 192.168.0.2 255.x.x.x

ip nat inside

interface x.x

description toward RB-router

ip address 192.168.200.1 255.x.x.x

ip nat outside

I supposed you have access on router LCD. If you use 192.168.200.1 as your address to access http and smtp and ..., LCD router will translate it to the real sever IP address.

Let me know I did not understand your question correctly.

Masoud

[Raheel qaiser]

Hello Masoud,

highly thankful for your quick guidance, You already got my point and your congs will help me..

Yes infect i have 2 sites connected through wireless link(Intranet. Need of 2nd router was stop broadcasting generated due to heavy traffic at site RB-Router.

Just i was failed to get access to the internet Server123 through router.

But let me ask one more thing please.. will my RB-router be able to forward http/https/ services request to forward :LDC-Router. or i also need to configure NAT in RB-Router to get/receive the required requests from its clients?

[Raheel qaiser]

Hello Masoud,

Highly thankful for your quick guidance, You already got my point and your configs will help me..

Yes infect i have 2 sites connected through wireless link(Intranet).Need of 2nd router was to stop broadcasting generated due to heavy traffic at site RB-Router.Just i was failed to get access to the internet Server123 through router .

But let me ask one more thing please.. will my RB-router be able to forward http/https/ services request to forward :LDC-Router. or i also need to configure NAT in RB-Router to get/receive the required requests from its clients?

[Masoud Pourshabanian]

Hello,

I am just unclear about something. If routing is enable and hosts can reach each other, why would you need port forwarding and NAT? If routing is enable, both routers can forward any packets with any ports(except some traffic such as multicast or broadcast ).

Can you ping your server from your client?

Let me know If I misunderstood something.

Masoud

[Raheel qaiser]

Right... infect i am using Transparent proxy server but in this scenario i have to configure proxy settings on clients(192.168.9.0) which only works for http and no https or smtp.

[Masoud Pourshabanian]

Your mail client will handle that. you need to configure your mail client with the address of your mail server. Just make sure your clients can ping your server(192.168.0.123),


Masoud

[Raheel qaiser]

Actually Here the issue is;  192.168.0.123 is only an Internet server and Email server will be accessed through internet... RB-Router clients will first get internet access through internet server123 then its client will be able to communicate with Email server.

[Masoud Pourshabanian]

Please check my previous commend before reading this one. My previous comment may solve your problem without using NAT. I am also giving you the configuration on RB router if you decide to implement NAT.

ip nat inside source static tcp 192.168.0.123 80 192.168.9.2 80  (for http)

ip nat inside source static tcp 192.168.0.123 443 192.168.9.2 443  (for https)

ip nat inside source static tcp 192.168.0.123 25 192.168.9.2 25  (for smtp)

and so on

Router RB

interface x.x

description toward server

ip address 192.168.200.2 255.x.x.x

ip nat inside

interface x.x

description toward clients

ip address 192.168.9.1 255.x.x.x

ip nat outside

192.168.9.2 will be your server IP address after NAT. You may want to change it if you have used it in your network. It can be any IP in the range of your interface address based on your topology.

Hope it helps,

Masoud