Solved

Cisco 2621 Port Address Translation Vs. Network Address Translation

Posted on 2004-04-02
2
448 Views
Last Modified: 2012-05-04
We want to successfully NAT specific ports to a internal server ip. For example our exchange 2003 server. Only port 80 53 21 should be Natted through our router to the server.
When we NAT those individual ports through our router it doesnt work. (Cant browse the internet, or send outside emails.)
ip nat inside source static tcp 10.9.200.2 53 xx.xxx.xxx.xxx 53 extendable
ip nat inside source static udp 10.9.200.2 53 xx.xxx.xxx.xxx 53 extendable
ip nat inside source static tcp 10.9.200.2 80 xx.xxx.xxx.xxx 80 extendable
ip nat inside source static tcp 10.9.200.2 21 xx.xxx.xxx.xxx 21 extendable


When we NAT everything to the server everything works fine. Even when we setup the windows 2003 built in firewall and block everything except the desired ports.

ip nat inside source static 10.9.200.2 xx.xxx.xxx.xxx extendable

This happens on 2003 2000 and XP Pro machines all the same.  
So why would the router not allow the NATting of indivuidual ports?
0
Comment
Question by:Mohonk
2 Comments
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 500 total points
ID: 10742461
Are you permitting these ports via your access-list?
0
 

Author Comment

by:Mohonk
ID: 10742542
Your the man thanks!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
checking for updates 11 59
Systems talking to each other 5 123
Destination host unreachable 12 64
Can't remote with RDC through ASUS RT-N66W Router 3 54
In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now