PPTP and HTTP Port Forwarding with Fixed NAT on the 'cisco' Router - Personal computers

Copyright laws (chemical) 2008 Add S. Crawley

Not long ago, a student at one of our workshops inquired on vent forwarding on a wireless router. She wished to allow PPTP clients to attach externally with a VPN remote computer contained in the product. On this page, We'll let you know that to do it along with a glimpse at applying interferance NAT to onward packets with a server.

Vent Sending on a Cisco The router

Sometimes we have bodily methods that need to be Internet-offered just like Internet computers, email computers, or VPN computers. Typically, I suggest splitting individuals methods inside of a DMZ to shield your work LAN on the bad guys, but however you determine to set it up, this process requires forwarding sought after packets on the router's exterior user interface with an bodily variety. It's really a fairly simple course of action. This is the setting on a Cisco 2611 wireless router:

user interface Ethernet0/1ip address 12.1.2.3 255.255.255.0ip nat exterior!user interface Ethernet0/0ip address 192.168.101.1 255.255.255.0ip nat interior!internet protocol nat interior reference listing 101 user interface Ethernet0/1 overloadip nat interior reference interferance tcp 192.168.101.2 1723 user interface Ethernet0/1 1723!accessibility-listing 101 let internet protocol any any

Within the above setting, Ethernet /1 is connected to the open public Internet that has a interferance address of 12.1.2.3 and Ethernet / is connected to the interior network that has a interferance address of 192.168.101.1. NAT exterior is tweaked on E0/1 and NAT interior is tweaked on E0/. Accessibility-listing 101 works in conjunction with the In .internet protocol nat interior reference listing 101 user interface Ethernet0/1 surchargeIn . assertion allowing all interior serves to implement E0/1 to attach to the Internet discussing what ever Ip is a member of user interface Ethernet E0/1.

The In .surchargeIn . assertion accessories Apply (Vent Handle Translation) which makes that doable. (Apply permits various bodily serves to share with you individual address when using external user interface by appending diverse vent figures to every association.)

The assertion In .internet protocol nat interior reference interferance tcp 192.168.101.2 1723 user interface Ethernet0/1 1723In . usually takes incoming vent 1723 (PPTP) needs on Ethernet0/1 and frontward the theifs to the VPN remote computer positioned at 192.168.101.2.

You could do such like that has a Server by modifying vent 1723 to vent 80 or vent 443. Fogged headlights that may mimic:

user interface Ethernet0/1ip address 12.1.2.3 255.255.255.0ip nat exterior!user interface Ethernet0/0ip address 192.168.101.1 255.255.255.0ip nat interior!internet protocol nat interior reference listing 101 user interface Ethernet0/1 overloadip nat interior reference interferance tcp 192.168.101.2 80 user interface Ethernet0/1 80!accessibility-listing 101 let internet protocol any any

During this illustration, the online world remote computer can be found at 192.168.101.2 and as an alternative to forwarding PPTP (vent 1723) targeted visitors, we have been forwarding HTTP (vent 80) targeted visitors.

Of course, it is possible to alter your Cisco wireless router in the same way to onward just about just about any targeted visitors from an outdoor user interface with an bodily variety.