Port Redirection Without NAT?

[999Dom999]

I have 2 cctv boxes with web interfaces both need to be accessed from the internet there is a netscreen router/firewall for internet access. I can use this to redirect http traffic from an external ip to the internal ip of the cctv. Thing is I only have this one IP and 2 cctv boxes. I also have a 2600 router which links another site.

I can use the same external IP that I have and redirect it to another internal ip as long as its not using port 80, so what I would do is use a different port (say 55555 for example) and use the ip of the 2600 router, but then get the 2600 to redirect that to my second cctv IP address using port 80, is this possible without NAT?

http://externalip:55555

hits netscreen redirects to Cisco2600 on port 55555 redirects to cctv back to port 80


I have done this with an 837 router using NAT and it works great, but I only have this 2600 to play with! Thanks for any help!

 

[pmesjar]

Without NAT you are out of luck. If I understand right, you have done this on 837 you are saying you can't configure this on 2600. Well the syntax is:

2600(config)# ip nat inside source static tcp <INSIDE IP> <INSIDE PORT> <OUTSIDE IP> <OUTSIDE PORT>

which will create static port-translation entry in your 2600 router. You can display them using:

2600# show ip nat translation

Then interface connected to Internet should be made outside:

2600(config-if)# ip nat outside

and interface connected to private network should be made inside:

2600(config-if)# ip nat inside

Peter Mesjar
CCNP, A+ certified
pmesjar@centrum.sk

"The only true wisdom is in knowing you know nothing.