Wacky NAT scenario - AUX port + reverse telnet + VPN

From: Johnnie Utah (johnnieutah1@gmail.com)
Date: Wed Jul 23 2008 - 01:05:20 ART


Experts,

I have a fairly obscure scenario that I'm trying to build a solution
for...First, a diagram:

Subnet A ----------[router A]----------VPN------------[router
B]---------Subnet B

Here is the initial requirement:

1. Create VPN between routers A&B over dialup on PSTN (done)
2. Connect Modbus enabled device to AUX port of router B and access it
on port 4001 (done)

Here is the problem I am trying to solve - there are (2) applications
originating from subnet A that are used to access the Modbus device in
hanging off router B with different destination port numbers.

- Application 1 can adjust the destination port to anything, i.e. TCP
4001 - this is tested and it works, the reverse telnet works fine.
- Application 2 is fixed at trying to connect to destination port TCP 502.

What I'm trying to accomplish is basic port translation - i.e.
192.168.0.1:502 ---> 192.168.0.1:4001. In my particular scenario, the
IP address is the fa0/0 ip address of router B.

I have tried several NAT scenarios including NAT on a stick, the "ip
nat inside source tcp x.x.x 502 x.x.x.x 4001 ext" and an array of
other permutations with limited results. Has anyone else on this
mailer attempted to port translate with reverse telnet? Am I missing
something obvious such as an ip alias to the desired port?

Much appreciated...

JU



This archive was generated by hypermail 2.1.4 : Mon Aug 04 2008 - 06:11:56 ART