Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Cisco 2811 Router port forwarding

Status
Not open for further replies.

drew1701d

Technical User
May 15, 2002
295
0
0
US
I've inherited yet another router with my customer and am barely a noob with Cisco routing yet they say, be happy your still employed, our budget is tight so figure it out. So heres what i'm trying to enable.
They want one of their servers accessible both ways via specific ports, think port forwarding for bit torrent or emule but in a commercial perspective. Any help in the right direction is GREATLY appreciated.

The IP address they want to have ports open both ways to is already statically NAT'd as shown below

ip nat inside source static 10.10.100.194 65.96.254.194

here is what I have added to the existing access-lists configuration and this is still not working

ip access-list extended inbound
permit tcp host 10.10.100.194 host 65.96.254.194 eq 42087
permit udp host 10.10.100.194 host 65.96.254.194 eq 41976
permit icmp any 10.10.0.0 0.0.255.255 echo-reply
evaluate tcpsession
evaluate udpsession
deny ip any any log
remark Incoming_to_LAN


ip access-list extended outbound
permit tcp host 65.96.254.194 host 10.10.100.194 eq 42087
permit udp host 65.96.254.194 host 10.10.100.194 eq 41976
permit tcp any any reflect tcpsession
permit udp any any reflect udpsession
remark Outgoing_from_LAN
 
The ACLs look to be misconfigured. What interfaces and in which direction are they applied?

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top