Hi David,
Port forwarding was recently implemented and is available in our most
current stable release. So, if you are running an earlier version, you
won't be able to configure it via the CLI. If you are running the most
current version, here's how you configure the rule you need:
[EMAIL PROTECTED] set service nat rule 10 type destination
[edit]
[EMAIL PROTECTED] set service nat rule 10 inbound-interface eth0
[edit]
[EMAIL PROTECTED] set service nat rule 10 protocols tcp
[edit]
[EMAIL PROTECTED] set service nat rule 10 source network 0.0.0.0/0
[edit]
[EMAIL PROTECTED] set service nat rule 10 destination address x.x.x.x <----
External public address
[edit]
[EMAIL PROTECTED] set service nat rule 10 destination port-number XXXX <----
External port number
[edit]
[EMAIL PROTECTED] set service nat rule 10 inside-address address 10.10.10.10
<---- Internal address you need to RD to
[edit]
[EMAIL PROTECTED] set service nat rule 10 inside-address port-number 3389
<---Windows RD port
[edit]
[EMAIL PROTECTED] commit
[edit]
OK
[EMAIL PROTECTED] show service nat
rule 10 {
type: "destination"
inbound-interface: "eth0"
protocols: "tcp"
source {
network: 0.0.0.0/0
}
destination {
address: x.x.x.x
port-number XXXX
}
inside-address {
address: x.x.x.x
port-number: 3389
}
}
[edit]
You only need a firewall rule if you have already implemented a
firewall. If you have, then you'd allow access to the ports and
addresses configured in the NAT rule.
Thank you,
Robyn
David Marrow Jr wrote:
I finally got my vyatta install up and running. Now i'm having a
problem with creating NAT rules for remote desktop. Can any assist me
with creating a rule to accept remote desktop connection on public IP
xx.xx.xx.xx port xxx1 and forwarding them to inside ip address x.x.x.x
port xxx2 thankyou!
Do I need to do this in the firewall? Or is NAT fine enough?
------------------------------------------------------------------------
_______________________________________________
Vyatta-users mailing list
[email protected]
http://mailman.vyatta.com/mailman/listinfo/vyatta-users
_______________________________________________
Vyatta-users mailing list
[email protected]
http://mailman.vyatta.com/mailman/listinfo/vyatta-users
