{"id":761,"date":"2009-06-03T01:36:46","date_gmt":"2009-06-03T07:36:46","guid":{"rendered":"http:\/\/gregsowell.com\/?p=761"},"modified":"2009-06-02T07:38:07","modified_gmt":"2009-06-02T13:38:07","slug":"cisco-nat-ftp-to-same-ip-as-overload","status":"publish","type":"post","link":"https:\/\/gregsowell.com\/?p=761","title":{"rendered":"Cisco NAT FTP to same IP as Overload"},"content":{"rendered":"

The idea for this tutorial is you only have a \/30 on our outside interface. You have an FTP server on the inside of your network you want to make publicly accessible. What we are going to do is NAT the FTP port on the outside interface to our FTP server on the inside. We will do all of this while still NAT Overloading on that same IP.<\/p>\n

\"ciscoftpnat\"<\/p>\n

interface fa0\/0\r\n desc outside-interface\r\n ip address 1.1.1.1 255.255.255.252\r\n ip nat outside\r\n!\r\ninterface fa0\/1\r\n desc inside-interface\r\n ip address 192.168.1.1 255.255.255.0\r\n ip nat inside\r\n!\r\nip route 0.0.0.0 0.0.0.0 1.1.1.2\r\n!\r\nip access-list extended nat\r\n permit ip 192.168.1.0 0.0.0.255 any\r\n!\r\nip nat inside source list nat interface fastEthernet 0\/0 overload\r\n!Here's where the magic begins.  We are doing our specific FTP NATs below.\r\nip nat inside source static tcp 192.168.1.11 21 interface FastEthernet0\/0 21\r\nip nat inside source static tcp 192.168.1.11 20 interface FastEthernet0\/0 20<\/code><\/pre>\n
You’ll notice that the two last lines are where everything happens.  You are basically saying everything that comes in the outside interface destined for ports 21 and 20 to redirect to the specific inside host of 192.168.1.11.<\/p>\n
ip nat inside source static tcp 192.168.1.11 21 interface FastEthernet0\/0 21\r\nip nat inside source static tcp 192.168.1.11 20 interface FastEthernet0\/0 20<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
The idea for this tutorial is you only have a \/30 on our outside interface. You have an FTP server on the inside of\u2026<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16,8],"tags":[],"class_list":["post-761","post","type-post","status-publish","format-standard","hentry","category-cisco","category-networking"],"_links":{"self":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/761","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=761"}],"version-history":[{"count":7,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/761\/revisions"}],"predecessor-version":[{"id":769,"href":"https:\/\/gregsowell.com\/index.php?rest_route=\/wp\/v2\/posts\/761\/revisions\/769"}],"wp:attachment":[{"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=761"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=761"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gregsowell.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=761"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}