Hi folks.
I have what I think must be a simple config request, I am sure someone can solve this in no time.
I have a non-cisco router with a public WAN address. This is conencted to a 3750 switch internally. The switch is the default gateway for all VLANs, and the gateway router has static routes back to the 3750. The Router provides NAT, no NAT is done on the switch.
My requirement is to port forward port 29 000 so that I can access a server on VLAN4 via this port.
So, I have:
Router: Port 29000 map to 192.168.4.1 (Switch VLAN4 address)
The question is, how do I route port 29000 from the 3750 to the server on 192.168.4.42 ?
I have the following relevant details:
interface Vlan4
ip address 192.168.4.1 255.255.255.0
ip access-group 104 in
access-list 104 deny ip 192.168.4.0 0.0.0.255 192.168.0.0 0.0.0.255
access-list 104 deny ip 192.168.4.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 104 deny ip 192.168.4.0 0.0.0.255 192.168.3.0 0.0.0.255
access-list 104 deny ip 192.168.4.0 0.0.0.255 192.168.5.0 0.0.0.255
access-list 104 deny ip 192.168.4.0 0.0.0.255 192.168.6.0 0.0.0.255
access-list 104 deny ip 192.168.4.0 0.0.0.255 192.168.7.0 0.0.0.255
access-list 104 deny ip 192.168.4.0 0.0.0.255 192.168.9.0 0.0.0.255
access-list 104 deny ip 192.168.4.0 0.0.0.255 192.168.10.0 0.0.0.255
access-list 104 deny tcp 192.168.4.0 0.0.0.255 host 192.168.4.1 eq telnet
access-list 104 deny tcp 192.168.4.0 0.0.0.255 host 192.168.4.1 eq www
access-list 104 deny tcp 192.168.4.0 0.0.0.255 host 192.168.8.1 eq telnet
access-list 104 deny tcp 192.168.4.0 0.0.0.255 host 192.168.8.1 eq www
access-list 104 deny tcp 192.168.4.0 0.0.0.255 host 192.168.8.10 eq www
access-list 104 permit ip any any
So, I want to add a line something like
ip source static tcp 192.168.4.42 29000
However I don't know the syntax well enough.
Please would you advise me on what exactly I should add in order to port forward port 29000 incoming form my router, to my server on 192.168.4.42.
Many thanks in advance,
NM
Solved! Go to Solution.
Hi NM
as you have permitted all traffic other than the subnets of inside network. on switch wise u dont need to do anything.
permit IP any any
check on the router side as suggested by naidu. NAT/PAT prob.