Announcement

Collapse
No announcement yet.

Port Forwarding

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Port Forwarding

    I need some help in writing a ACL to allow the following to happen, but first some background information.

    I have a Webserver in my DMZ that I have mapped a static map from my WORLD IP (x.x.x.x) to my DMZ ip (10.10.100.149/ 255.255.252.0) translating the traffic coming in on port 80 to go to the DMZ server via port 8080.


    Now I have to figure out how to get all traffic that is in my OFFICE network 10.10.116.0 255.255.252.0 to go to the same server on port 8080. We run multiple WebServers in the DMZ and access on all servers with expection to the one in question is either on port 80 or port 443, depending. I cannot have a static mapping (or can I ??) from my OFFICE to DMZ becuase as I understand it, that would create a one-to-one relationship which would result in directing all port 80 traffic on my OFFICE network to the DMZ server shown in the static mapping.

    So the question is, how can I get http (80) traffic that is sourced on 10.10.116.0/255.255.252.0 to go to the DMZ based server at 10.10.100.149 on port 8080 without blocking any other port 80 traffic destined for other servers in the DMZ.

    From my OFFICE network I want to be able to enter this information in my browser address bar:

    http://10.10.100.149

    I do not want to have to enter this: http://10.10.100.149:8080

    Thanks in advance for any insight on this.

  • #2
    Re: Port Forwarding

    Try the following:


    static (dmz,inside) tcp 10.10.100.149 80 10.10.100.149 8080 netmask 255.255.255.255

    Ryan

    Comment


    • #3
      Re: Port Forwarding

      Thanks Ryan! Got this part to work. Now I'm trying to solve a similar issue with regards to our VPN dialin users accessing this server without having to put the :8080 on the end of the URL.

      I'll be putting in another post on this issue. Feel free to take a look at it.

      Comment


      • #4
        Re: Port Forwarding

        I am glad that you got it working!

        Ryan

        Comment

        Working...
        X