how to onpen port to access a service inside

[dat.tran]

hi all

i have a service  camera at : 172.168.2.121:8181

I want access from internet outside.

I creat a service and Nat

but not success

pls help me

[apasupulati · Accepted solution]

Hello,

Your second NAT rule is incorrect for this scenario (to only allow access from outside, you can remove 'L3_LAN' as the source zone here). You need a Destination NAT to allow users from outside to access the public camera, so no source translation necessary as well.

You will need a rule like below:

"public access to server" {

        from untrust-L3;

        source any;

        to untrust-L3;

        to-interface  ;

        destination <public-ip>;

        service any/any/any;

        translate-to "dst: private-ip:port";

Here's a good document that explains about configuring NAT in different scenarios:

Hope that helps!

Aditi