Welcome to ISAserver.org

Nat internal address through specific port

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> SecureNAT Client >> Nat internal address through specific port

Page: [1]

Message

<< Older Topic Newer Topic >>

Nat internal address through specific port - 11.Sep.2004 12:28:00 AM

lquid

Posts: 8
Joined: 10.Sep.2004
Status: offline

Is there a server publishing rule or access rule I need to implement to be able to forward to a specific ip address on a certain port.

I want any external ip address to go through one of the NIC cards on ISA and translate to an internal address on a specific port.

Thanks!

Post #: 1

Featured Links*

RE: Nat internal address through specific port - 12.Sep.2004 4:43:00 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Christina,

Can you tell us *exactly* what you want to do? Then we can help you use the ISA firewall to do it.

Thanks!
Tom

(in reply to lquid)

Post #: 2

RE: Nat internal address through specific port - 13.Sep.2004 4:02:00 PM

lquid

Posts: 8
Joined: 10.Sep.2004
Status: offline

Basically I want to use Port Address Translation. I want to login with remote admin from an external address to 192.168.4.2 (ISA server), but then I want the ISA Server to forward 192.168.4.2 on the remote admin port into 192.168.3.2.

What kind of rule do i need to use?

Thanks

(in reply to lquid)

Post #: 3

RE: Nat internal address through specific port - 15.Sep.2004 12:04:00 PM

spazm

Posts: 20
Joined: 14.Jun.2003
From: Hawaii
Status: offline

If there is a NAT relationship between the two networks, you will be "hiding" the IP address of the server that is in your "internal" network. If you are trying to publish a Terminal Server, you can use server publishing rule to accomplish this. The rule can listen on an entire interface or a specific IP address.

Also, Tom wrote an excellent article on how to publish a Terminal Server on different ports!

[ September 15, 2004, 12:10 PM: Message edited by: spazm ]

(in reply to lquid)

Post #: 4

RE: Nat internal address through specific port - 16.Sep.2004 10:02:00 PM

AbqBill

Posts: 478
Joined: 3.Jun.2003
From: Albuquerque NM USA
Status: offline

christina wrote:

quote:
Basically I want to use Port Address Translation.

Hi,

ISA Server's NAT is really PAT (or NAPT). From your description, I think you're asking if ISA Server can do 1-to-1 NAT. The simple answer is no, but I think you can accomplish what you want by using server publishing.

Regards,

Bill

(in reply to lquid)

Post #: 5

RE: Nat internal address through specific port - 17.Sep.2004 12:40:00 AM

lquid

Posts: 8
Joined: 10.Sep.2004
Status: offline

Thanks for the responses [Smile]

I am trying to use the server publishing rule, but it is just not working. Can I use remote routing access service to do the port forwarding; and will it work with isa?

(in reply to lquid)

Post #: 6

RE: Nat internal address through specific port - 17.Sep.2004 4:38:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Chistina,

Yes, that is very easy to do. What protocol are you publishing?

Thanks!
Tom

(in reply to lquid)

Post #: 7

RE: Nat internal address through specific port - 17.Sep.2004 3:48:00 PM

lquid

Posts: 8
Joined: 10.Sep.2004
Status: offline

Remote Administrator port 4899

(in reply to lquid)

Post #: 8

RE: Nat internal address through specific port - 18.Sep.2004 6:30:00 AM

spazm

Posts: 20
Joined: 14.Jun.2003
From: Hawaii
Status: offline

Create an inbound protocol definition using port 4899. Then use server publishing rule to publish the remote administrator. Not too sure if this app requires secondary connections. But i was able to view the desktop, and i stopped the testing there. Make sure the published server is a snat client.

[ September 18, 2004, 06:41 AM: Message edited by: spazm ]

(in reply to lquid)

Post #: 9