Welcome to ISAserver.org

Source Port

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> SecureNAT Client >> Source Port

Page: [1]

Message

<< Older Topic Newer Topic >>

Source Port - 27.Sep.2002 12:40:00 PM

Guest

Hi,
Is it possible to force or change the source port when using NAT with ISA Server?

Post #: 1

Featured Links*

RE: Source Port - 27.Sep.2002 8:54:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Olivier,

no, you can't to that. Keep in mind ISA is doing N:1 NAT (sometimes called PAT) and by design you don't have control over the source port in a N:1 NAT environment.

HTH,
Stefaan

(in reply to Guest)

Post #: 2

RE: Source Port - 27.Sep.2002 11:33:00 PM

Zolive

Posts: 1
Joined: 27.Sep.2002
Status: offline

Hi spouseele,
thank you for your answer but it gives me two more questions.

1 You said ISA can perform N:1 NAT (which is PAT). Is it Port Address Translation and is it working on the destination port ?

2 Can I do what I want (changing the source port) with a third party software or a plug-in on the gateway where ISA is installed ?

Olivier

(in reply to Guest)

Post #: 3

RE: Source Port - 27.Sep.2002 11:45:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Olivier,

maybe I have not expressed myself clearly enough, but ISA *is* doing Port Address Translation (or N:1 NAT) and you can't switch it off! [Big Grin]

Any device implementing that technology, changes the source port and source IP address. The destination port and destination IP address is *not* touched. To my knowledge, even a third party software or a plug-in can't change that behaviour.

HTH,
Stefaan

(in reply to Guest)

Post #: 4