Adtran
Help
The Adtran community holiday season is starting next week! The holiday period will span from December 21, 2024 to January 6, 2025. During this time, responses to feedback form submissions may be delayed. If you are encountering product issues, you can reach out to Adtran support at any time.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Anonymous
Not applicable
‎05-09-2019 02:31 PM

NV 3120 port forward from a specific public address

I have many units setup however due to security needs  I have customers wanting ports open only from specific Public IP addresses. How do I accomplish this in the CLI.

Labels (1)
Labels
0 Kudos
Reply
1 Reply
jayh
Honored Contributor
Honored Contributor
‎05-10-2019 12:31 AM

Re: NV 3120 port forward from a specific public address

It's essentially the same as you would do for a port-forward from any external host, except your ACL has the allowed host IP in the source field.

Scenario:

Allowed external ip address 192.0.2.5

External IP of router 172.16.1.5

Internal SSH server 192.168.10.5

ip access-list extended ssh-fwd-list

  permit tcp host 192.0.2.5 host 172.16.1.5 eq 22

interface eth 0/1

description WAN to Internet

ip address 172.16.1.5 255.255.255.0

ip access-policy Public

ip policy-class Public

nat destination list ssh-fwd-list address 192.168.10.5 port 22

0 Kudos
Accept as Solution Reply