Step 6: Port Forwarding with NAT¶
This section shows an example of a single inbound Network Address Translation (NAT) port forward, also known as NAT pinholes or port mapping, to access a security camera. NAT port forwarding can provide specific outside to inside network connections.
NAT Port Forwarding¶
Define NAT port forwarding:
nat static mapping tcp local 192.168.95.63 554 external outside 63554
Permit Port Forward Traffic with ACL¶
Traffic that is port forwarded by NAT must also be permitted by the outside access control list (ACL). The ACL is created and applied to input queue access-list on the outside interface.
acl rtsp-outside rule 11 desc Permit to Cam3 action permit ip-version ipv4 protocol tcp destination port 63554 exit exit # # Apply ACL to interface Access-List interface outside access-list input acl rtsp-outside sequence 101 exit