ip nat translation port-timeout -- WHICH port?
Bookmark this page:
 Yahoo!
 Google
 Windows Live
 del.icio.us
 digg
 Netscape
|
|
|||||||||||||
|
Posted by on July 30, 2008, 4:08 pm
Please log in for more thread options A question about port-timeout: Which port does this refer to, the inside or outside port. For example: ip nat translation port-timeout udp 123 30 Is this the 123/udp on the inside or outside network? THANKS! Jon K | |||||||||||||
|
Posted by News Reader on July 30, 2008, 6:04 pm
Please log in for more thread options Opinion: I suspect that it would influence any translation referencing the port number (inside global, inside local, outside local, outside global). Consider HTTP translations rather than NTP, because the client and server ports would differ with HTTP. Compare a translation for an outbound connection to an Internet-based Web server, and another translation for an inbound connection to a web server within your organization. In one instance it is the outside local and outside global addresses listening on port 80, and for the other it is the inside global and inside local addresses listening on port 80. Presumably, you would expect/want both translations to be influenced by your NAT translation port-timeout configuration. If not, you'd have to settle for a generic TCP timeout, or configure a timeout for all possible client ports for one of the two scenarios. Once connection initiation triggers the translation, I would expect traffic in either direction would reset the timer. Best Regards, News Reader | |||||||||||||
| Similar Threads | Posted |
| ip nat translation port-timeout -- WHICH port? | July 30, 2008, 4:08 pm |
| Port translation with PIX 506E | January 23, 2006, 9:10 pm |
| PIX 515 Rejection happens before port translation ??? | November 27, 2006, 9:20 am |
| port translation happens after packet is rejected ??? | November 27, 2006, 7:46 am |
| Re: Cisco VPN behind a nat router with port translation. | February 18, 2007, 2:03 pm |
| Re: PIX - "No translation group found for udp src outside..." port 137 | July 24, 2007, 1:27 pm |
| Nat Translation | June 2, 2006, 1:56 pm |
| Re: VPN with NAT translation | June 24, 2005, 10:48 am |
| IP translation - It's possible? | May 8, 2007, 4:53 pm |
| PIX translation | November 21, 2007, 2:06 am |
| Dynamic Outside Translation | October 17, 2005, 4:29 pm |
| Using Cisco PIX without translation? | November 9, 2005, 1:35 am |
| T1/ethernet translation | August 9, 2006, 10:02 am |
| Static Translation | September 16, 2006, 2:28 pm |
| translation rule | February 9, 2007, 10:51 am |
>
> A question about port-timeout: Which port does this refer to, the
> inside or outside port.
>
> For example:
> ip nat translation port-timeout udp 123 30
>
> Is this the 123/udp on the inside or outside network?
>
> THANKS!
> Jon K