Destination that the port forwarding.
So basically what we are doing in the destination, part of every previously we were doing the we were
sending the traffic from our external to our DMZ, for example.
In that case, what we are doing this time, we are sending the traffic to not only the IP address,
but also the port as well.
So we are doing the Port Authority so I can show you the diagram here.
So for example, here, what you can see is.
You are heading to 201, 250 for that 11, but also to the port as well, the original port, maybe
Port 80.
But outside world didn't know that 200 wanted to come before that 11 and the port is nine nine nine,
that boat will be you will be sending the traffic to the fireball fireball.
Know that this boat is actually bound to the public or private iapetus.
And the port number at the original port is the regional services installed on Disturber Airport, ETR,
or HTP or web browsing.
But the outside world didn't know that the IP address and the port.
Now this time we are not just forwarding the IP address, but we are also translating the services as
well.
So this is more secure and we can use somewhere where we have less IP public IP addresses but more private
IP addresses for the different services support forwarding the technique where you can not only secured
the IP address, but also report services as well.
So this is very predictable for when you access the for example, I mentioned BBC Dot Quarter UK.
We know the BBC is working on HTP, for example, and everybody knows that this is working on a series
of predictable what are the public libraries and what about the port as well?
In some cases, if you want to hide the port, then the way is use the Port Authority.
So if you look at our our our spreadsheet, which we already prepared.
What you.
Here, port forwarding spreadsheet, look at this.
Let's look at the evidence you have your we are doing the username and password, the global IP address
and the port associated with private operators in the port so that you can see.
So it is not.
But when you don't use port forwarding, whatever the original port, it's you hit the port on the outside
and you will be connected.
But in the port forwarding situation, you're not hitting the IP address, but with a different port
actually, and it will be forwarded to a regional port.
So now in order to let point of view what we are doing here.
And so what are the configurations?
So first of all, you need to create the object.
The objects are the public IP start 11. 11 dot one.
So Delamar 254 dot one one one 11.
That's a public IP address we have created.
And then one chapter two one six one one on that one.
As well, and then after that, we need to create policy in that room and in the natural what we are
doing, we are using the same rule that we have configure strategy not to TMZ, but and then we say
Internet to Internet.
The differences in the definitions in the original back took the original package, actually.
So regional markets are the traffic is coming from originally.
Traffic is coming from Internet to Internet, but the difference is this time the services are 99,
OK, and the IP address is the same.
And transliteration point of view.
Translation point of view, a static IP and the translation address, and the port is 80.
On top of it, we need to create a rule as well.
The rule will be only should be allowed.
We have created the rule.
Source, Internet destination, BMC Public IP address, application, web browsing, but keep in mind,
the differences services should be any do not add up to application default because we need any kind
of services.
OK, that's, I think the same, that we push the changes and tested for the testing point of view when
it log into the outside machine and we type this outside public IP plus nine nine nine.
And then you see a Cisco.
Cisco, so you can log in from the outside, sorry.
Wow.
Yeah, so you see.
It's HDB, we accepted the GDP report nine nine nine, and it forwarded to an eight nine.
So here, if you look at the logs right now on the device.
OK, point nine nine nine nine is applied to look at the situation here.
Interesting one, traffic is coming from two hundred one point sixty five hundred.
And destination is 200 or 254 to put vote of 11 that voted 99, the interfaces is this Nattrass 116,
Levander one and all.
So basically you're sending the traffic to 99, which is then translated back into the 80.
So this is called autobody.
OK, in a different situation, you might get a different boat, but keep in mind always, what is the
translation port?
What is the original port?
Which user will be accessing and what will be the translation port?
OK, and the steps are saying there is no difference.
OK.
And question.