NAT with port range

[asgerhartmann]

Having a 1841 with two interfaces. I need to set up NAT with a range of ports. I already have inside interface and outside interface configured plus i have various static NAT entries with syntax e.g.:

ip nat inside source static 192.168.200.10 4443 87.120.250.47 4443 ext

This works fine and i have 10 static entries in the router by now. Now my newest challenge is to open a port range 50000 to 59999.

Using CLI or Cisco CP i cannot do anything else then mapping one inside port to one outside port.

Do i really have to type in 10000 lines of config? Or is there a way around this?

[IAN WHITMORE]

Well, I think the best way is to do a static nat for the IP in question (i.e. all 65535 ports) and then allow the port range in an access-list.

[Latchum Naidu · Accepted solution]

Hi,

The best way I would suggest is creat a nat statement with assigning route-map to it like below.

ip nat inside source static 192.168.200.10 87.120.250.47 route-map NAT extendable

access-list 109 permit tcp host 192.168.200.10 range 50000 59999 any

route-map NAT permit 10
match ip address 109

Hope the above will help you.

Please rate the helpfull posts.
Regards,
Naidu.

[asgerhartmann]

Ok. Thanks for the answers. I will give both above a try and see whats best way forwa

rd.

[asgerhartmann]

Well, thanks for the replies. I havent yet deployed this - but will do soon.

Question is now...how do i mark this discussion as "answered"?

BR

Asger

[Latchum Naidu]

Hi Asger,

You just need to click on the correct answer box which will be there below to this post.

Regards,

Naidu.