Comments on: Cisco, NAT, and Port Range Stupidity http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/ Networks - Systems - Coding Sun, 06 Jul 2008 12:53:26 +0000 http://wordpress.org/?v=2.2.3 By: Cisco, NAT, and Port Range Resolution | Slaptijack http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-1129 Cisco, NAT, and Port Range Resolution | Slaptijack Sat, 09 Feb 2008 09:06:06 +0000 http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-1129 [...] you might recall, I had previously taken umbrage with Cisco’s inability to forward a range of ports to a particular host. Many readers have offered suggestions and links to other documents around the [...] […] you might recall, I had previously taken umbrage with Cisco’s inability to forward a range of ports to a particular host. Many readers have offered suggestions and links to other documents around the […]

]]> By: William http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-795 William Tue, 11 Dec 2007 01:08:56 +0000 http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-795 Hey there, my easy way was just write a file of the commands I wanted then copy and paste to the terminal. Then when I need to take the lines out, just edit the file, then copy and paste the commands to remove the rules. Just borrowed what someone had and used sed to change my ip and ethernet device. Seems to be quite a few ways to do this depending on what you like to use the most and what is available. http://slaptijack.com/ios-nat-for-world-of-warcraft-updater/ Hey there, my easy way was just write a file of the commands I wanted then copy and paste to the terminal. Then when I need to take the lines out, just edit the file, then copy and paste the commands to remove the rules. Just borrowed what someone had and used sed to change my ip and ethernet device.

Seems to be quite a few ways to do this depending on what you like to use the most and what is available.

http://slaptijack.com/ios-nat-for-world-of-warcraft-updater/

]]> By: Brandon http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-653 Brandon Sat, 24 Nov 2007 20:24:16 +0000 http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-653 Will the PIX allow static statement that allows for a range of outside ports (on the outside interface) to be forwarded to the same range on an inside address? I don't have thousands of lines, but a few dozen and it does clutter up the config.... Thanks, Brandon Will the PIX allow static statement that allows for a range of outside ports (on the outside interface) to be forwarded to the same range on an inside address?

I don’t have thousands of lines, but a few dozen and it does clutter up the config….

Thanks,
Brandon

]]> By: Dufus http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-650 Dufus Sat, 24 Nov 2007 13:43:19 +0000 http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-650 What do you guys mean the PIX/ASA doesn't have this problem? They sure do... I haven't found an easy way to forward a range of ports to one machine inside while allowing another range to be forwarded to a second What do you guys mean the PIX/ASA doesn’t have this problem? They sure do… I haven’t found an easy way to forward a range of ports to one machine inside while allowing another range to be forwarded to a second

]]> By: slap http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-552 slap Thu, 01 Nov 2007 12:31:18 +0000 http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-552 Here's another link to a possible solution. It seems a bit cumbersome to me, but is better than nothing.<br /> <br /> http://www.petri.co.il/forums/showthread.php?p=84196 Here’s another link to a possible solution. It seems a bit cumbersome to me, but is better than nothing.

http://www.petri.co.il/forums/showthread.php?p=84196

]]> By: slap http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-450 slap Fri, 05 Oct 2007 00:47:39 +0000 http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-450 That's an interesting find. I'll give it a try and report back with my results. That’s an interesting find. I’ll give it a try and report back with my results.

]]> By: Chris Edwards http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-448 Chris Edwards Thu, 04 Oct 2007 16:29:43 +0000 http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-448 You can do this. I found a way at... http://www.dslreports.com/faq/13794 You can do this. I found a way at… http://www.dslreports.com/faq/13794

]]> By: slap http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-377 slap Mon, 17 Sep 2007 12:07:05 +0000 http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-377 Thanks for the response, Chris! You're right that a PIX or ASA doesn't suffer from this particular annoyance. Unfortunately, not everyone has an ASA handy or available. This information is for those folks. Thanks for the response, Chris!

You’re right that a PIX or ASA doesn’t suffer from this particular annoyance. Unfortunately, not everyone has an ASA handy or available.

This information is for those folks.

]]> By: Chris http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-374 Chris Sun, 16 Sep 2007 02:00:01 +0000 http://slaptijack.com/networking/cisco-nat-and-port-range-stupidity/#comment-374 Might help if you were using the right tool for the right job....get either a Cisco PIX or ASA firewall... Might help if you were using the right tool for the right job….get either a Cisco PIX or ASA firewall…

]]>