[Config] Richard in Cisco http://www.dslreports.com/forum/r8810670 en Sun, 29 Nov 2009 05:47:44 EDT Sun, 29 Nov 2009 05:47:44 EDT Re: [Config] Richard http://www.dslreports.com/forum/remark,8814551 Covenant : Hi Richard,

said by savannah010 See Profile:

In order for incoming connections to the ISA box I have to create a one to one translation (if I'm correct) but this is dangerous. Am I correct in saying that I would create an access list and attach it to that interface for inbound connections?


It is not dangerous, so to speak but it leaves you wide open on that one to one translation. You are correct in saying that you have to create an ACL.

said by savannah010 See Profile:

There are also port (SMTP, WWW) translations already in place on that interface; will the one to one translation take preference over these translations?


Should not do. If you have port translations already configured, the one to one NAT to the ISA server should not take precedence over it.

said by savannah010 See Profile:

Thanks in advance for any input.

Richard.


Your welcome Richard. :)]]> http://www.dslreports.com/forum/remark,8814551 Wed, 17 Dec 2003 14:42:59 EDT [Config] Richard http://www.dslreports.com/forum/remark,8810670 savannah010 : Hi.

I'm setting a VPN for the first time. We have an ISA box on a local LAN and are connecting with a 2501 to the ISP. We're NAT'ing over Serial0 to the ISP. In order for incoming connections to the ISA box I have to create a one to one translation (if I'm correct) but this is dangerous. Am I correct in saying that I would create an access list and attach it to that interface for inbound connections? There are also port (SMTP, WWW) translations already in place on that interface; will the one to one translation take preference over these translations?

Thanks in advance for any input.

Richard.]]> http://www.dslreports.com/forum/remark,8810670 Wed, 17 Dec 2003 03:26:11 EDT