cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
689
Views
0
Helpful
1
Replies

Port Forwarding a Range in UC540 NAT

freshmangobvi
Level 1
Level 1

Hi all,

I am trying to forward a range of ports (55736-55863 for Synology  Surveillance Station) from the WAN interface to an internal IP on a Cisco UC540.  I'm not great with the CLI so I generally stick to CCA but right now I'm not even sure it's possible with the CLI.

I've found this tutorial online: http://evilrouters.net/2010/05/25/port-forwarding-a-range-of-ports-on-cisco-ios/

The first step in the tutorial is to setup a NAT IP Pool (which I *can* do in CCA) but unfortunately, the tutorial tells me to use the IP address of the internal device I want to foward the range of ports to but CCA (and its documentation) tells that the IP address must be on the same subnet as the WAN IP address?

I tried following the tutorial anyway by telnetting in to the UC540 and entering the following via the CLI:

UC540 config t
UC540 ip nat pool PORTFWD 192.168.12.121 192.168.12.121 netmask 255.255.255.0 type rotary
UC540 access-list 121 permit udp any any range 55736 55863
UC540 ip nat inside destination list 121 pool PORTFWD

 

I can now see the 121 access list in CCA, although it has no Interface or Direction assigned to it?

Does anyone know if this is possible?  I really don't fancy setting up 127 entries in the NAT table!

Thanks in advance everyone!

 

1 Reply 1

Nathan Compton
Level 4
Level 4

The range isn't going to work in CCA.  As you are probably aware, CCA has limits to what it can do, even if something can be done in the CLI.

 

That being said, I think this is a better write up on how to do this:

 

http://ping8888.com/2014/01/21/cisco-ios-port-forwarding-pat/