I've inherited yet another router with my customer and am barely a noob with Cisco routing yet they say, be happy your still employed, our budget is tight so figure it out. So heres what i'm trying to enable.
They want one of their servers accessible both ways via specific ports, think port forwarding for bit torrent or emule but in a commercial perspective. Any help in the right direction is GREATLY appreciated.
The IP address they want to have ports open both ways to is already statically NAT'd as shown below
ip nat inside source static 10.10.100.194 65.96.254.194
here is what I have added to the existing access-lists configuration and this is still not working
ip access-list extended inbound
permit tcp host 10.10.100.194 host 65.96.254.194 eq 42087
permit udp host 10.10.100.194 host 65.96.254.194 eq 41976
permit icmp any 10.10.0.0 0.0.255.255 echo-reply
evaluate tcpsession
evaluate udpsession
deny ip any any log
remark Incoming_to_LAN
ip access-list extended outbound
permit tcp host 65.96.254.194 host 10.10.100.194 eq 42087
permit udp host 65.96.254.194 host 10.10.100.194 eq 41976
permit tcp any any reflect tcpsession
permit udp any any reflect udpsession
remark Outgoing_from_LAN
They want one of their servers accessible both ways via specific ports, think port forwarding for bit torrent or emule but in a commercial perspective. Any help in the right direction is GREATLY appreciated.
The IP address they want to have ports open both ways to is already statically NAT'd as shown below
ip nat inside source static 10.10.100.194 65.96.254.194
here is what I have added to the existing access-lists configuration and this is still not working
ip access-list extended inbound
permit tcp host 10.10.100.194 host 65.96.254.194 eq 42087
permit udp host 10.10.100.194 host 65.96.254.194 eq 41976
permit icmp any 10.10.0.0 0.0.255.255 echo-reply
evaluate tcpsession
evaluate udpsession
deny ip any any log
remark Incoming_to_LAN
ip access-list extended outbound
permit tcp host 65.96.254.194 host 10.10.100.194 eq 42087
permit udp host 65.96.254.194 host 10.10.100.194 eq 41976
permit tcp any any reflect tcpsession
permit udp any any reflect udpsession
remark Outgoing_from_LAN