Redirection (ip nat static) with filtering

[cris tani]

Hi all,

I want to apply a D-NAT on may cisco router to access to my mangement IPBX server  via internet and i have sucessfully done it with this command : 

(config)# ip nat inside source static tcp 10.1.1.254 80 41.25.130.47 8080 , and to access to my server i type 41.25.130.47:8080 .


BUT my problem is that evryone can access to my server and i want to restrict access just for 193.50.30.0/24 network so is there any solution to do that please ??

info : IP WAN router : 41.25.130.47
         IP IPBX : 10.1.1.254

Thanks in advance.

[Georg Pauwen]

Hello,

configure the access list below and apply it inbound on your external interface, e.g.:

interface Dialer1
 ip access-group 101 in

access-list 101 permit tcp 193.50.30.0 0.0.0.255 host 41.25.130.47 eq 8080
access-list 101 deny tcp any any eq 8080
access-list 101 permit ip any any