Port Mapping Question

Hello,

I have a question regarding port mappings/redirecting. I have a web application that uses port 8000. I have a private IP mapped to a Public IP, and I want to know if it's possible for users who access this application and not have to type in the ip address and then the port 8000 following or have to type domain name and then port 8000. Can I configure something on the FW or even the DNS end on Windows so that users will only have to type in the ip address or domain name (not needing to type in port 8000 afterwards) to access the application?
Thank You in advance to anyone who assists.
johnsinkAsked:
Who is Participating?
 
MikeKaneCommented:
You could do a port forward for this on the ASA/PIX.  

One thing to know is that you can not have a 1 to 1 static NAT and a 2nd port forward going to the same internal IP.  It's one or the other.  

So, you would need to configure DNS A record for webapp.domain.com to point to an IP, (for this example 10.1.1.1)  

The ASA accepts inbound traffic on 10.1.1.1 on 80 then port forwards it inside to your host on, say, 192.168.1.10 on port 8000  


It would look something like this:

static (inside,outside) tcp 10.1.1.1 80 192.168.1.10 8000
access-list outside_in extended permit tcp any host 10.1.1.1 eq http
access-group outside_in in interface outside

Here's more info:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708b4.shtml
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.