How to configure static NAT for a Cisco Router

Source: Internet
Author: User

Recently, a friend asked me how to configure static NAT for a Cisco router to allow Internet users to access the Intranet Web and email servers through a Cisco router. Obviously, this function requires NAT between the public IP address and the Intranet IP address. The following are the specific implementation methods. At present, many people access the Internet through NAT. NAT can be converted between the Intranet IP address and the Internet IP address, so that the intranet user can access the Internet directly. Most users use NAT called port address translation (PAT). Cisco calls this method NAT overload. Before starting, let's first understand what Static NAT is. Figure A is A network topology. Our goal is to convert a static IP address on the Internet to an internal IP address through a router. For a Linksys router with a Web configuration interface, this is easy to implement. However, for a Cisco router that uses the CLI mode, it is troublesome if you do not know the corresponding command. Therefore, it is necessary to collect more information before you start. For example, in our example, we need to collect the necessary information through the following methods: ◆ vro inline port E0/0: IP ◆ vro external port S0/0: IP ◆ Intranet IP address of the Web/mail server: ◆ Internet IP address of the Web/mail server: there are two steps necessary to allow Internet users to access the Intranet Web/mail Server: 1. configure NAT 2. in this article, I will focus on basic static NAT configurations. However, readers should ensure that the Internet-related data can be accessed through the firewall. Whether you use ACL or Cisco IOS to configure the firewall, make sure you are familiar with the operation sequence of Cisco IOS and set the correct IP address (public network and Intranet ). In other words, you should know whether NAT works first or firewall filtering works first. After obtaining the relevant information, we began to configure static NAT. In our example, we first perform the basic configuration: interface Serial0/0ip address nat outside interface Ethernet0/0ip address nat inside we need to use NAT to convert the public IP address of the Web/mail server from bytes to (and from convert to ). The following is the NAT configuration between the Intranet and the public network: router (config) # ip nat inside source static tcp 25 25 router (config) # ip nat inside source static tcp 443 443 router (config) # ip nat inside source static tcp 80 80 router (config) # ip nat inside source static tcp 110 110 The above ports are used because these ports comply with the corresponding service port. For example, port 25 corresponds to SMTP mail sending, port 443 corresponds to secure Web connection HTPS, port 80 corresponds to HTTP, and port 110 corresponds to POP3 receiving. The above configuration assumes that we have a fixed public IP address. If not, we can also use the router egress IP address (Serial 0/0 in this example). The configuration method is as follows: router (config) # ip nat inside source static tcp 25 interface serial 0/0 25 if your public IP address is an ip address allocated through the DHCP of the ISP, you can also use the preceding configuration method. In addition, we also need to register the domain names of the Web server and email server to the DNS registry on the Internet. In this way, the user can access our website by entering the domain name in the browser. For example, if you enter, you can access Then, our router will convert this address to In this way, the Web server receives browser requests and responds smoothly. In addition to configuring static NAT, you may want to learn how to configure dynamic NAT at the same time, so that your intranet PC can access the Internet through dynamic NAT (such as NAT overload or PAT.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.