Well I was looking for a way to specify a port range in a nat statement.

For example:

standart nat/pat statement.
ip nat inside source static tcp 10.0.0.1 21 208.192.100.100 21

I need something like this:
ip nat inside source static tcp 10.0.0.1 64300-64400 208.192.100.100
64300-64400

What I am trying to do is open up a PASV FTP data port range for use on a
FTP
server with non standard ports. As long as I have the server on 20/21 PASV
and PORT
seem to work fine, but when I move the ports to something non standard, I
cannot
connect on the PASV command without having the ports specified and nat'd. I
tried
using cisco's ip nat service command as referenced:

http://www.cisco.com/warp/public/556/6.html

but apparently I am a gump and can't make it work :)

Stephen


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Georg Pauwen
Sent: Wednesday, April 10, 2002 4:14 AM
To: [EMAIL PROTECTED]
Subject: RE: PAT port range on a Cisco 1604? [7:41001]


Hi Stephen,

are you looking for a command to limit the ports used by PAT ? AFAIK, this
is not possible through the 'overload' command. If you know exactly which
ports your hosts use, you could set up an extended access list specifying
the ports that you want to allow.

Regards,

Georg




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=41050&t=41001
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to