I've configured a VPN (IPSec) between 2 sites on Cisco 881-K9.

The server "A", which have the address 192.168.0.X must be reachable on port 3389 from public network.

I've configured forwarding ports with the command:

ip nat inside source static TCP 192.168.0.X 3389 interface fastethernet 0 3389

The server is reachable from outside, from the site in which it is located.

But there is an issue with the second site:

  • I can ping the server with its local address 192.168.0.X
  • But telnet to port 3389 unreachable.

Resolurion: (conditional port-forwarding)

ip nat inside source static tcp 192.168.0.X 3389 x.x.x.x 443 route-map VPN

access-list 107 deny ip 192.168.0.X any

access-list 107 permit ip any any

route-map VPN permit 10

match ip address 107


Google AdSence

AUST IT - Computer help out of hours, when you need it most.

Find out why we do it for less.


AUST IT will help you resolve any technical support issues you are facing onsite or remotely via remote desktop 24/7. More...


Reservoir, Melbourne,
3073, VIC, Australia

Phone: 0422 348 882

This email address is being protected from spambots. You need JavaScript enabled to view it.

Sydney: 0481 837 077


Join us in social networks to be in touch.


Complete the form below, and we'll send you our emails with all the latest AUST IT news.