Network Management

Reply
New Contributor
Posts: 1
Registered: ‎03-14-2016

NAT with a Cisco Firewall

I am New to Aruba appliances. I need help accessing a host computer behind a RAP from a public IP address using a cisco firewall NAT. I have a public IP address NATed on the Cisco Firewall to the Aruba Controller and that works. I then wanted to port forward the port 50080 to the host computer. I can access the specified host computer from anywhere on the internal network using 10.208.58.x but not externally.

 

The public ip address of 173.165.x.x NAT’s to 10.208.48.x on the Cisco Firewall. This allows me to the aruba controller externally.(https://173.165.x.x:4343)

 

On the Aruba Controller I set up the policy session IPv4 any host 10.208.48.x tcp 50080 dst-nat ip 10.208.58.x 80

 

I applied the Policy to the port firewall policy session

 

I get a timeout saying the server stopped responding.(https://173.165.x.x:50080 and http://173.165.x.x:50080)

Guru Elite
Posts: 20,422
Registered: ‎03-29-2007

Re: NAT with a Cisco Firewall

Unfortunately, you cannot do a static inbounds NAT to a device behind a RAP.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Aruba Employee
Posts: 395
Registered: ‎11-04-2011

Re: NAT with a Cisco Firewall

Though the RAP will not allow inbound NAT, you can probably access that computer via the controller. Through the controller, you have full access to the clients behind the RAP (The RAP connection is layer 2 transparent), and it might be a solution in your case to create that inbound NAT entry in the data center where the controller lives, and then just route the traffic through the controller to the computer behind the RAP.

 

If you have multiple RAPs, this even simplifies the solution as you can keep the NAT and firewalling central.

 

Would that work?

--
If you have urgent issues, please contact your Aruba partner or Aruba TAC.
Search Airheads
Showing results for 
Search instead for 
Did you mean: