asked on

Forwarding Ports for SBS2011

Hi,

I have SBS2011 server (unfortunately) and I am installing a new router.
Current CISCO router has the following forwarding port statements:

ip nat inside source static tcp 192.168.1.9 443 98.100.36.50 443 extendable
ip nat inside source static tcp 192.168.1.9 987 98.100.36.50 987 extendable
ip nat inside source static udp 192.168.1.9 987 98.100.36.50 987 extendable
ip nat inside source static tcp 192.168.1.9 4125 98.100.36.50 4125 extendable
ip nat inside source static udp 192.168.1.9 4125 98.100.36.50 4125 extendable

I am not sure if I need to create the same port forwarding in the new router because:
1. We are not using Exchange Server as part of SBS2011 after we migrated to Office 365.
2. There is a separate local Web server.
3. There is a separate local VPN server.

But one thing SBS2011 still does is that it allows remote users to connect to their office PC from their home PCs using Remote Desktop Connection (with RD Gateway server name "remote.domain_name.com").

So I need to keep port 443 TCP for RD Gateway?

Do I still need 987 TCP & UDP?
Do I still need 4125 TCP & UDP?

Thanks for your help.

ASKER CERTIFIED SOLUTION

Lee W, MVP

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Elie Matar

since it's the NAT from inside to outside just do one to one nating (ip to ip), there is no need to do the nat by port.
and you can restrict the incoming connectivity through Access list on the router based on the required ports.