Forwarding ports on a 1605

[bendjo]

Hello

I am interested in forwarding ports 2234 and 5534 on my 1605. The IP of my outside interface is dynamically assigned by comcast. The posts I have seen relating to this subject pertain to the forwarding of static ip's. Any suggestions are really appreciated. I have attached a copy of my short running config.

Current configuration : 1176 bytes
!
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname router
!
logging queue-limit 100
enable password 7 XXXXXXXXXXXXXXXXXXXXXXXX
!
ip subnet-zero
ip name-server XXXXXXXXXX
ip name-server XXXXXXXXXXXX
no ip dhcp conflict logging
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool DHCP-Pool
network 10.1.1.0 255.255.255.0
domain-name comcast.net
dns-server XXXXXXXXXX XXXXXXXXXXXX
default-router 10.1.1.1
!
ip dhcp pool CLIENT
import all
!
!
!
!
interface Ethernet0
description Outside int. to Comcast/BB -- address via DHCP
ip address dhcp
ip nat outside
no ip route-cache
no cdp enable
!
interface Ethernet1
description Inside interface
ip address 10.1.1.1 255.255.255.0
ip nat inside
no ip route-cache
no cdp enable
!
ip nat inside source list 10 interface Ethernet0 overload
ip classless
ip http server
ip http access-class 10
!
!
!
!
interface Ethernet0
description Outside int. to Comcast/BB -- address via DHCP
ip address dhcp
ip nat outside
no ip route-cache
no cdp enable
!
interface Ethernet1
description Inside interface
ip address 10.1.1.1 255.255.255.0
ip nat inside
no ip route-cache
no cdp enable
!
ip nat inside source list 10 interface Ethernet0 overload
ip classless
ip http server
ip http access-class 10
!
access-list 10 permit 10.1.1.0 0.0.0.255
no cdp run
!
line con 0
password 7 XXXXXXXXXXXXXXXXXXXXXX
login
line vty 0 4
access-class 10 in
password 7 XXXXXXXXXXXXXXXXXXXXXXXXXX
login
!
end

 

[ior]

Try ip nat inside source static <proto> <internal ip to forward to> <port> interface <external interface> <port>

This should forward tcp port 2234 ->> 10.1.1.2 port 2234
ip nat inside source static tcp 10.1.1.2 2234 interface ethernet 0 2234

 

[bendjo]

Thanks for the reply and pardon me for posting a portion of my config twice. I created the statement that you recommended and a sh ip nat trans command verifies that translation exists however when a request from the internet comes in on port 2234 it is forwarded to seemingly random port on the inside network.

 

[bendjo]

Here is the output of sh ip nat trans
router#sh ip nat trans
Pro Inside global Inside local Outside local Outside global
tcp XX.XXX.XXX.XX:2234 10.1.1.3:2234 --- ---
tcp XX.XXX.XXX.XX:1030 10.1.1.3:1989 62.194.241.66:2234 62.194.241.66:2234