RE: NATing Port Range - IOS

Hi

No good.

Cisco TAC did say that this is not supported feature, but all the work-arounds
didn't work. So - I'm stuck with one to one NAT.

> Date: Sun, 11 Jul 2010 11:51:27 +0400
> Subject: Re: NATing Port Range - IOS
> From: ccie19804_at_gmail.com
> To: cciestudy_at_hotmail.com
> CC: ccielab_at_groupstudy.com
>
> try using destination/rotary nat, even though its well known that it
> works for only TCP, you should test in on newer codes, never know it
> may work.
>
> #ip nat pool LOCAL x.x.x.x x.x.x.x type rotary
> #ip access-l ex INTERNET-TO-INSIDE
> perm udp any host <z.z.z.z> range 10000 20000
> # ip nat inside destination INTERNET-TO-INSIDE pool LOCAL
>
> Test it and let us know.
>
> Swap
> #19804x2
>
> On Sat, Jul 10, 2010 at 3:53 AM, ccie study <cciestudy_at_hotmail.com> wrote:
> > FYI - ports I'm trying to forward through are: UDP Voice 10000 to 20000.
These
> > are Voice ports (5060 works).
> >
> > Thank you
> >
> >> From: cciestudy_at_hotmail.com
> >> To: ccielab_at_groupstudy.com
> >> Subject: NATing Port Range - IOS
> >> Date: Fri, 9 Jul 2010 23:21:37 +0000
> >>
> >> Hi,
> >>
> >> I'm trying to nat a port range in IOS (12.4) router.
> >>
> >> What I like to do is:
> >>
> >> anyone form the internet Y.Y.Y.Y hitting my IP address of my outside
router
> >> interface Z.Z.Z.Z on ports 10,000 to 20,000 -> forward them to a
internal
> > host
> >> (keep the ports) X.X.X.X.
> >>
> >> I'm have success when I configure each ONE port per each line - but when
> > ever
> >> I do port range using either pools, ACLs, route-maps with my NAT I'm not
> > able
> >> to get this to work. Again - it works when I do example: port 10,001 to
> > 10,001
> >> but when I do range from 10,000 to 20000 - no luck.
> >>
> >> Anyone ever tried this? Is this even supported in IOS? One would think
this
> > is
> >> a simple thing to do - but I've been having issues for some time now
trying
> > to
> >> figure this out.
> >>
> >> Thank you for help.
> >>
> >>
> >>
> >>
> >> _________________________________________________________________
> >> The New Busy is not the too busy. Combine all your e-mail accounts with
> >> Hotmail.
> >>
> >
http://www.windowslive.com/campaign/thenewbusy?tile=multiaccount&ocid=PID2832
> >> 6::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_4
> >>
> >>
> >> Blogs and organic groups at http://www.ccie.net
> >>
> >> _______________________________________________________________________
> >> Subscription information may be found at:
> >> http://www.groupstudy.com/list/CCIELab.html
> >>
> >>
> >>
> >>
> >>
> >>
> >>
> >
> > _________________________________________________________________
> > The New Busy think 9 to 5 is a cute idea. Combine multiple calendars with
> > Hotmail.
> >
http://www.windowslive.com/campaign/thenewbusy?tile=multicalendar&ocid=PID283
> > 26::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_5
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
Received on Wed Jul 14 2010 - 10:24:25 ART