Solved

Static NAT on Cisco 2600 from outside host to internal host

Posted on 2007-03-28
2
422 Views
Last Modified: 2008-02-01
Cisco 2600 router.What is the command to allow a host on the Internet to be able to RDP to an internal server?  The Cisco 2600 needs a nat statement on it, I know.  The external ip on the 2600 is: EXTERNAL_IP.  The internal ip address of the server is INTERNAL_IP.

Would the command be:
in nat inside source static tcp EXTERNAL_IP 3389 INTERNAL_IP 3389  ??

the fact that I am trying to translate an external destination address to an internal destination address makes me wonder about the term 'inside' being used in the statement, vs. using outside.

Thanks
0
Comment
Question by:cliffordgormley
2 Comments
 
LVL 11

Accepted Solution

by:
billwharton earned 500 total points
Comment Utility
Nopes, it'll only be:
ip nat inside source static internal_ip external_ip

The syntax usually is:
ip nat inside souce static inside_local inside_global

inside_local refers to a local area network address on the inside of your router
inside_global refers to a globally addressable address on the outside of your router (this address should be reachable by Internet hosts)

Here's a very good document explaining you in-depth what the definitions mean. It may be confusing at first but you'll get it:
http://www.cisco.com/warp/public/556/8.html


You can limit access to particular ports when you place your access lists on the outside interface.

Hope this helps
0
 

Author Comment

by:cliffordgormley
Comment Utility
Excellent!  Thanks Bill
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Suggested Solutions

New Server 172.16.200.2  was moved from behind Router R2 f0/1 to behind router R1 int f/01 and has now address 172.16.100.2. But we want users still to be able to connected to it by old IP. How to do it ? We can used destination NAT (DNAT).  In DNAT…
In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now