<div>
<div class="content wysiwyg-content">
When a customer has not paid or thier service has been disabled for any reason, we send them to a web page with our name and phone number and a message to call us.<br />
With customers where we have a linux based firewall, I simply use the following iptables commands<br />
#### let thru all dns traffic. &nbsp;DNAT all www traffic to one IP address (blocked service screen )<br />
#### block all other traffic from the customer's subnet<br />
#### customers interface is eth1 --- the public facing interface is eth0<br />
#iptables -t nat -A PREROUTING -i eth1 -p udp --dport domain -j ACCEPT<br />
#iptables -t nat -A PREROUTING -i eth1 -p tcp --dport www -j DNAT --to 11.22.33.44<br />
#iptables -t nat -A PREROUTING -s 55.66.77.88/27 -j DROP<br />
<br />
We have many customers with just Cisco 1600/1720/2500 routers and no firewall.<br />
<br />
How do I do the same redirection with a standard cisco router? &nbsp;<br />
<br />
They are all running IOS 11 or higher.
</div>
</div>


When a customer has not paid or thier service has been disabled for any reason, we send them to a web page with our name and phone number and a message to call us.
With customers where we have a linux based firewall, I simply use the following iptables commands
#### let thru all dns traffic.  DNAT all www traffic to one IP address (blocked service screen )
#### block all other traffic from the customer's subnet
#### customers interface is eth1 --- the public facing interface is eth0
#iptables -t nat -A PREROUTING -i eth1 -p udp --dport domain -j ACCEPT
#iptables -t nat -A PREROUTING -i eth1 -p tcp --dport www -j DNAT --to 11.22.33.44
#iptables -t nat -A PREROUTING -s 55.66.77.88/27 -j DROP

We have many customers with just Cisco 1600/1720/2500 routers and no firewall.

How do I do the same redirection with a standard cisco router?  

They are all running IOS 11 or higher.

Cisco Router - redirect all customer traffic to specific IP and Port ( eg. www and domain )

When a customer has not paid or thier service has been disabled for any reason, we send them to a web page with our name and phone number and a message to call us.
With customers where we have a linux based firewall, I simply use the following iptables commands
#### let thru all dns traffic.  DNAT all www traffic to one IP address (blocked service screen )
#### block all other traffic from the customer&#39;s subnet
#### customers interface is eth1 --- the public facing interface is eth0
#iptables -t nat -A PREROUTING -i eth1 -p udp --dport domain -j ACCEPT
#iptables -t nat -A PREROUTING -i eth1 -p tcp --dport www -j DNAT --to 11.22.33.44
#iptables -t nat -A PREROUTING -s 55.66.77.88/27 -j DROP

We have many customers with just Cisco 1600/1720/2500 routers and no firewall.

How do I do the same redirection with a standard cisco router?  

They are all running IOS 11 or higher.

Networking is the process of connecting computing devices, peripherals and terminals together through a system that uses wiring, cabling or radio waves that enable their users to communicate, share information and interact over distances. Often associated are issues regarding operating systems, hardware and equipment, cloud and virtual networking, protocols, architecture, storage and management.

Networking

A router is a networking device that forwards data packets between computer networks. Routers perform the "traffic directing" functions on the Internet. The most familiar type of routers are home and small office cable or DSL routers that simply pass data, such as web pages, email, IM, and videos between computers and the Internet. More sophisticated routers, such as enterprise routers, connect large business or ISP networks up to the powerful core routers that forward data at high speed along the optical fiber lines of the Internet backbone. Though routers are typically dedicated hardware devices, use of software-based routers has grown increasingly common.

Routers

The Domain Name System (DNS) is a hierarchical, globally distributed system responsible for associating the name of a computer, service or other resource into an IP address for connecting to the Internet or a private network. Most prominently, it translates domain names to the numerical IP addresses needed for the purpose of computer services and devices worldwide.