Change Outbound Port for certain traffic

Hi,
I am trying to do a specific task and not being able to figure out what I need to do. Essentially, I would like the Cisco IOS router (3945) to change all DNS traffic going outbound, to use port 54 instead of the standard port 53.
Setup is very simple. One inside Interface and One Outside interface. Internal addressing on the inside with PAT for internet access. I would like that whenever an internal client makes a DNS request. When the router forwards that to the DNS server on the internet, it should send it to port 54 instead of 53.
Appreciate the help.

It's based on where you're going to see the traffic from. If you want to translate inside -> outside, you'll use "ip nat inside". Outside would be when you're wanting to translate an outside source to something else internal.
*Edit*
It also depends on what interfaces you have labeled as "ip nat outside" and "ip nat inside".
ip nat outside source list:   
translates the source of the IP packets that are traveling outside to inside
translates the destination of the IP packets that are traveling inside to outside
ip nat inside source list:
translates the source of IP packets that are traveling inside to outside
translates the destination of the IP packets that are traveling outside to inside

Similar Messages

  • Change http port for Adobe Connect Pro?

    I'm running Adobe Connect Pro 7.5 and would like to change the HTTP port Adobe Connect Pro uses.  I've changed this from 80 to 90 in the Adobe Connect Pro console and saved.  Then restarted my Adobe Connect Pro application.  When I go to the URL http:\\<servername>:90 I get a "Connot Connect to Webpage" error.  If I change it back to 80 the URL http:\\<servername>:80 works.
    Does anyone know how I can change the port for  Adobe Connect Pro 7.5?  Is there another step I need to do on my Windows 2003 server?

    I've had to "cache" uploaded videos by playing them shortly before the audience will see them. For me, the cache holding time when using Adobe's servers is about 5 minutes.

  • Change defaut port for personal cloud

    Hey, i own 3 iomega nas for a long time and never been able to use the personal cloud.
    What happens is my ISP blocks the defauts ports used by iomega for personal cloud, 80 and 443.
    I have already changed my ISP and looks like here in brazil the lowers ports are all blocked. Port 50500 or midia is fine.
    How can i change the defaut ports, to use for example 8080 and 4430?
    I also need to change ports because if i want to use all 3 personal cloud it wont work if they using all same ports.

    Hello rjcarlantonio
    I unfortunately do not have a way for you to modify the http/https ports for personal cloud on these devices.  
    You can however change the 50500 (basic remote storage manager access) port to another port in the 50500-50599 range.  I can't say for certain if this will work well for 3 devices trying to host clouds on the same internet connection as personal cloud was not designed for that.  
    LenovoEMC Contact Information is region specific. Please select the correct link then access the Contact Us at the top right:
    US and Canada: https://lenovo-na-en.custhelp.com/
    Latin America and Mexico: https://lenovo-la-es.custhelp.com/
    EU: https://lenovo-eu-en.custhelp.com/
    India/Asia Pacific: https://lenovo-ap-en.custhelp.com/
    http://support.lenovoemc.com/

  • Change of port for Livecycle server

    Hi all,
    When we first setup our Livecycle server we configured it running on a non-standard port and have experienced repeated headaches with people behind corporate firewalls not being able to open documents secured with Rights Management.
    We'd like to reconfigure our installation to solve this (change the port) but will this mean all our documents will stop working? Will we have to re-apply RM policies and then redistribute all of our documents?
    Thanks,
    Andrew

    Hi,
    Based on your description, I guess that you install the backup software on Windows Server 2012 Essentials firstly,
    and then configure Direct Access. Then you find there is an issue of port 25566 conflict. If anything I misunderstand, please don’t hesitate to let me know.
    Changing the default port of Direct Access on Windows Server 2012 Essentials seems to be not a good idea. Would
    you please let me know more information of this third-party backup software? You may contact with vendor of the backup software and confirm which service (or any other) listens on port 25566. Meanwhile, confirm if we can change port 25566 of the backup software.
    By the way, for backup, Windows Server Essentials provides reliable ways to perform regular backups of your
    server and backups of your network computers. For more details, please refer to the following article.
    Manage Backup and Restore in Windows Server
    Essentials
    Hope this helps.
    Best regards,
    Justin Gu

  • Changing listening port for JBoss

    Can anyone point out where to look for in order to change the listening port for JBoss. By defualt it takes 8080, I want to change that to some other number.
    I have been looking into the folders but it seems a lot of them and hard to find the exact file to change, need some help here.
    Thanks

    Follow the bouncing link and remember Google is your friend.
    http://www.google.com/search?hl=en&q=JBoss+%2B+changing+the+default+port
    PS.

  • Outbound PAT for SMTP traffic

    Cisco ASA 5505, Software 8.0(3)
    ASA IP: xxx.xxx.xxx.yy4/29
    This is part of my ASA config that ensures PAT for incomming SMTP traffic:
    access-list acl_inbound_outside extended permit tcp any host xxx.xxx.xxx.yy7 eq smtp
    nat-control
    global (outside) 1 interface
    nat (inside) 0 access-list acl_no_nat_inside
    nat (inside) 1 0.0.0.0 0.0.0.0
    static (inside,outside) tcp xxx.xxx.xxx.yy7 ftp 172.27.1.1 smtp netmask 255.255.255.255
    access-group acl_inbound_outside in interface outside
    This ensures SMTP traffic to xxx.xxx.xxx.yy7 reach my SMTP server.
    But outgoing SMTP traffic is from xxx.xxx.xxx.yy4 (WAN IP of ASA).
    How can I set up that ONLY SMTP traffic from 172.27.1.1 is PATed behind IP xxx.xxx.xxx.yy7 and other traffic from 172.27.1.1 will be NATed to
    xxx.xxx.xxx.yy4?

    Hi,
    It seems that there is either a typo or mistake in the configuration above.
    You are forwarding "ftp" port to "smtp" port
    Shouldnt it be
    static (inside,outside) tcp xxx.xxx.xxx.yy7 smtp 172.27.1.1 smtp netmask 255.255.255.255
    So in addition to forwarding the "smtp" port you also want all outgoing "smtp" traffic from this single host/server to use the public IP address xxx.xxx.xxx.yy7
    Then you can configure this
    access-list SMTP-POLICYPAT remark Policy PAT for SMTP traffic
    access-list SMTP-POLICYPAT permit tcp host 172.27.1.1 any eq smtp
    global (outside)  25 xxx.xxx.xxx.yy7
    nat (inside) 25 access-list SMTP-POLICYPAT
    Hope this helps
    Please do remember to mark the reply as the correct answer if it answered your question.
    - Jouni

  • SRE External Gig port for WCCP traffic?

    Has anyone been successful with using the external Gig port on the SRE modules for WCCP traffic?  Has anyone tried it?
    I'd like to reduce the CPU on my ISR-G2 routers that have the SRE modules running WCCP GRE.  I'd like to use the external gig port on the SRE module for the WCCP traffic, which will allow me to use WCCP L2.  Is this even feasible?  Or maybe I just need to add WCCP L2 on an SRE as a New Feature request to Cisco?
    According the to Cisco documentation....
    The external service-module interface can be used to monitor LAN traffic. You can also select the external interface as the management interface for the SM. The external interface cannot be used for downloading applications.
    Visible only to the SM software on the Cisco SM-SRE, the external service-module interface is the Gigabit Ethernet interface connector on the Cisco SM-SRE faceplate. The external interface supports data requests and data transfers from outside sources, and it provides direct connectivity to the LAN through an RJ-45 connector.

    Tammy,
    What is preventing you from configuing WAAS on SRE with L2 WCCP / Mask assignment via the internal interface?   This is totally feasible.
    If you are trying to decrease CPU utilization on your router, don't expect switching from GRE to L2 to make a drastic difference.  The ISR G2 is a software based platform, as such WCCP (whether L2 or GRE) is processed by the CPU with CEF assistance. 
    True removing the GRE encapsulation will save some processing overhead, but in the end it's the PPS (packets per second) your router is handling that's driving the CPU.
    Remember when you add WCCP / WAAS to the flow it's no longer packet in/ packet out on the router.  Compressed data in on WAN, out to WAAS, uncompressed from WAAS back to Router, out on the LAN, then the reverse... uncompressed data on the LAN in to the router, out to WAAS, compressed from WAAS out to the router, then out on the WAN.  So depending on the compression observed you will see > 2x the amount of traffic being processed by the router. 

  • How Can I Change the Ports for WebDAV file shares.

    Title says it all. I have another piece of software using port 80 and 443, I'd like to create iOS shares using WebDAV but I can't find anywhere in the GUI to change the port numbers and I can't work out whether I need to do something involving Apache virtual hosts and if so which config files are relevant to the WebDAV server.
    Someone must have done this by now, anyone know how its done???!!!!
    Thanks in advance.

    OK, so I worked out which files to edit and I actually managed to change the Apache/WebDAV ports on a clean 10.8 Server.
    By clean I mean I installed 10.8.0, updated to 10.8.3 via the combo updater, then installed the latest version of Server app and configured the services.
    Having done that I was able to make the required changes and all is working well. I then replicated the process on my live server but it throws up an error when I try to start up the WebDAV sharing.
    This thread outlines the same issue:
    https://discussions.apple.com/thread/4199421?start=0&tstart=0
    I am getting this exact problem, in that any manual change at all to the 0000_any_443_.conf file will cause WebDAV to fail to start. This is annoying because I need to change that file. Its also annoying because the problem isnt there on my 'clean' server.
    I deleted the entire /Library/Server/ folder and the Server.app and reinstalled Server.app from the App Store, recreating the /Library/Server folder from scratch. This cleared out the apache config files which I tried to re-modify, but all the file sharing settings were retained. Does anyone think it would be worth deleting all the sharepoints? Any other ideas?

  • How to change default ports for task flow application?

    I deploy a task form with the following hwtaskflow.xml information:
    <?xml version = '1.0' encoding = 'UTF-8'?>
    <hwTaskFlows xmlns="http://xmlns.oracle.com/bpel/workflow/hwTaskFlowProperties">
    <ApplicationName>worklist</ApplicationName>
    <LookupType>LOCAL</LookupType>
    <TaskFlowDeploy>false</TaskFlowDeploy>
    <TaskFlowServer>
    *<hostName/>*
    *<httpPort/>*
    *<httpsPort/>*
    </TaskFlowServer>
    <hwTaskFlow>
    <WorkflowName>ApproverHumanTask</WorkflowName>
    <TaskDefinitionNamespace>http://xmlns.oracle.com/MyApp/MyComposite/MyTask</TaskDefinitionNamespace>
    <TaskFlowId>MyTask_TaskFlow</TaskFlowId>
    <TaskFlowFileName>WEB-INF/MyTask_TaskFlow.xml</TaskFlowFileName>
    </hwTaskFlow>
    </hwTaskFlows>
    When I deploy the form then check the task URI in EM I see
    Host name: server host name
    HTTP port: 80
    HTTPS port: 443
    I know I can override these ports in the hwtaskflow but what if I want HTTPS port left blank? We don't have HTTPS active on our server. Another server in our environment only populates the HTTP port (HTTPS port is left blank) but I'm puzzled why the different behavior.
    Can anyone tell me either how to specify a "blank" HTTPS port in the hwtaskflow or, preferably, how to change the server configuration so that HTTPS port is not filled in when I deploy the task form? We are wanting a completely automated deployment and presently we have to manually remove the HTTPS port via EM after deploying. Argh!

    Jon,
    May be you already figured out the solution nevertheless i will answer your questions.
    1. Turning off the https port - give value as 0 for httpsPort in your hwtaskflow.xml.
    Second reason why your custom hwtaskflow is not getting picked up is you have set the TaskFlowDeploy as false.
    If you set this as true , and specify your cluster address you should be all set.
    for eg : - your cluster host address is somename.cluster.com with only http configured at port 80 lets assume.
    Then your hwtaskflow should look like this
    <?xml version = '1.0' encoding = 'UTF-8'?>
    <hwTaskFlows xmlns="http://xmlns.oracle.com/bpel/workflow/hwTaskFlowProperties">
    <ApplicationName>worklist</ApplicationName>
    <LookupType>LOCAL</LookupType>
    <TaskFlowDeploy>true</TaskFlowDeploy>
    <TaskFlowServer>
    <hostName>somename.cluster.com</hostName>
    <httpPort>80</httpPort>
    <httpsPort>0</httpsPort>
    </TaskFlowServer>
    <hwTaskFlow>
    <WorkflowName>LeaveRequestTask</WorkflowName>
    <TaskDefinitionNamespace>http://xmlns.oracle.com/BuildApplication/BuildProject/LeaveRequestTask</TaskDefinitionNamespace>
    <TaskFlowId>LeaveRequestTask_TaskFlow</TaskFlowId>
    <TaskFlowFileName>WEB-INF/LeaveRequestTask_TaskFlow.xml</TaskFlowFileName>
    </hwTaskFlow>
    </hwTaskFlows>
    This will automatically pick up the values on deployment , other play you can configure this is in your em console as well.

  • How can I change the port for Adobe Media Player?

    After instaling Adobe Media Player I lost my IIS. AMP has hijacked my port 80. Now how could I alter configuration so that AMP will use a different port.
    I have many programs configured for Port 80 and I dont want to go and change all of the hardcoded ports in Javascript and CSS files.
    http://hodentek.blogspot.com/2009/04/adobe-media-player-internet-information.html
    http://hodentek.blogspot.com/2009/04/adobe-media-player-and-iis-part-2.html

    These tools you are talking about, did you configure the tnsnames for them?
    If you plan to change the default listening port, you need to modify the listener.ora file under $ORACLE_HOME/network/admin
    After 9i, Oracle has service registration
    A feature by which the PMON process automatically registers information with a listener. Because this information is registered with the listener, the listener.ora file does not need to be configured with this static information.
    You can try to run one listener, see if both instances can register themselves in even they are different versions.

  • Span Port - Mirror Certain traffic

    Hi All,
    Following example -
    I have my Inbound Internet connection coming into my switch into a Public VLAN. Coming into that Inbound connection is email from the outside world, among other traffic. Is there a way for me to SPAN this port but send only the email traffic to my monitoring device or is it a case of you either see all traffic or none? I wonder also, the traffic is most likely encrypted at this point which means probably can't determine what is what....

    It's based on where you're going to see the traffic from. If you want to translate inside -> outside, you'll use "ip nat inside". Outside would be when you're wanting to translate an outside source to something else internal.
    *Edit*
    It also depends on what interfaces you have labeled as "ip nat outside" and "ip nat inside".
    ip nat outside source list:   
    translates the source of the IP packets that are traveling outside to inside
    translates the destination of the IP packets that are traveling inside to outside
    ip nat inside source list:
    translates the source of IP packets that are traveling inside to outside
    translates the destination of the IP packets that are traveling outside to inside

  • Change cipher strength for management traffic

    Hi All,
    I’m performing a new deployment for my customer on a C370 Ironport and my customer has an internal team performing a band test on the Ironport box. The results show that the management traffic (HTTPS) is only using medium strength traffic (56bits – 112bits) in which does not meet the compliance of the organization. From the knowledge base, I checked that our management traffic is using either RC4-SHA or RC4-MD5. Any way to change this to AES or 3DES?
    Besides that, in the band test, customer also notices that the box supports anonymous SSL ciphers. Any way to disable this?
    Thanks.

    Hi there,
    check out these articles:
    Article #1399: How can I alter what ciphers are used with the Graphical User Interface (GUI)? Can I disable SSL v2 for the GUI? Link: http://tools.cisco.com/squish/80676
    Article #1367: How do I prevent the IronPort appliance from negotiating null or anonymous ciphers? Link: http://tools.cisco.com/squish/3637E
    So to exclude low and anonymous ciphers, sompthing like this would apply:
    HIGH:MEDIUM:-SSLv2:-aNULL:@STRENGTH
    Hope that helps,
    Andreas

  • How to change font size for certain domains in Safari

    I want to increase the font size for a few websites that have font's sizes I can't read. I already use a CSS file that changes my link colors so I can modify that files if that helps.
    Here's a website I need to change http://www.boxofficeguru.com/weekend.htm. Whenever I go to this page I have to increase the font size and when I go to a different site I have to make the font size smaller. Any ideas?

    If there are really only a few sites that you have problems with, just go to the site, and click the Command key along with the plus key.    This will temporarily increase the size of the type. 
    Command and the minus(-)  key makes type smaller.  These commands will work on a per site basis.
    You might also want to check out the "Posts Like This" list to the left. >>>>>>>>>>>

  • How can I change the output for certain columns only?

    I am finding it hard to explain my issue , as I am very green when it comes to database, but I will try my best.
    I am writing a script that will query a database and output 5 columns, the first and last name of a student, the last name of their adviser, their enrollment status, and how many years they have been enrolled.
    I have the student's enrollment date and graduation date stored, however not all students have graduated, so that field is null for some students.
    my question is, how can I use their enrollment status of graduated to change the calculation of how long they were enrolled for.
    This is what I have so far :
    SELECT
         STUDENTS.NameFirstS,
         STUDENTS.NameLastS,
         STUDENTS.EnrollStatus,
         TRUNC((MONTHS_BETWEEN(SYSDATE, STUDENTS.EnrollDate))/12) as Years,
         FACULTY.NameLast
    FROM
         STUDENTS,
         FACULTY
    WHERE
         STUDENTS.ThesisAdvisor = FACULTY.FacultyId
    I'm not sure where to go form here, like I said, I am very new. Thank You in advance!

    Thank you for the warm welcome :)
    My Oracle Version is 11.2.0.1.0
    Here is the create statement I used for the table.
    CREATE TABLE STUDENTS
    (StudentId NUMBER(9)                                                             
    ,NameFirstS VARCHAR(255) NOT NULL                                             
    ,NameMiddleS VARCHAR(255)                                                       
    ,NameLastS VARCHAR(255) NOT NULL                                             
    ,PhoneHome NUMBER(10) NOT NULL                                                  
    ,PhoneOffice NUMBER(10)                                                            
    ,HomeCity VARCHAR(255) NOT NULL                                         
    ,HomeState VARCHAR(255) NOT NULL                                             
    ,HomeStreet VARCHAR(255) NOT NULL                                             
    ,EnrollDate DATE NOT NULL                                                       
    ,EnrollStatus VARCHAR(255) NOT NULL                                             
    ,StudyArea VARCHAR(255) NOT NULL                                             
    ,SpouseNameFirst VARCHAR(255)                                                  
    ,SpouseNameLast VARCHAR(255)                                                  
    ,ThesisTitle VARCHAR(255) NOT NULL                                             
    ,ThesisInternational VARCHAR(255)                                              
    ,ConvocationDate DATE                                                            
    ,ThesisAdvisor NUMBER(9) NOT NULL                                             
    ,Mentor NUMBER(9) NOT NULL                                                       
    ,CONSTRAINT STUDENTS_pk PRIMARY KEY (StudentId)                              
    ,CONSTRAINT STUDENTS_Mentor_fk FOREIGN KEY (Mentor)                     
    REFERENCES FACULTY(FacultyId)                               
    ,CONSTRAINT STUDENTS_ThesisAdvisor_fk FOREIGN KEY (ThesisAdvisor)     
    REFERENCES FACULTY(FacultyId)                                                       
    And here is 2 inserts of random data
    INSERT INTO STUDENTS (StudentId, NameFirstS, NameMiddleS, NameLastS, PhoneHome, PhoneOffice, HomeCity, HomeState
    , HomeStreet, EnrollDate, EnrollStatus, StudyArea, ThesisTitle, ConvocationDate, ThesisAdvisor, Mentor)                               
    VALUES(778506631                                        
              , 'John'                                             
              , 'Jacob'                                        
              , 'Smith'                                             
              , 3125551234                                        
              , 5182293313                                        
              , 'Wilksbury'                                        
              , 'Texas'                                             
              , '14 Main Road'                                   
              , TO_DATE('04-SEP-2003', 'DD-MON-YYYY')          
              , 'Graduated'                                        
              , 'Physics'                                             
              , 'Why Move'                                        
              , TO_DATE('07-JUL-2008', 'DD-MON-YYYY')          
              , 157928743                                             
              , 997569876                                        
    INSERT INTO STUDENTS (StudentId, NameFirstS, NameLastS, PhoneHome, HomeCity, HomeState, HomeStreet
    , EnrollDate, EnrollStatus, StudyArea, SpouseNameFirst, SpouseNameLast, ThesisTitle, ThesisInternational, ThesisAdvisor, Mentor)
    VALUES(251321188                                             
              , 'Larry'                                             
              , 'Timsfield'                                        
              , 2815551200                                        
              , 'Johnsburg'                                        
              , 'Florida'                                             
              , '223 Route 54'                                   
              , TO_DATE('09-SEP-2010', 'DD-MON-YYYY')          
              , 'Full Time'                                        
              , 'Medicine'                                        
              , 'Wanda'                                             
              , 'Timsfield'                                        
              , 'Cut Me Mick'                                        
              , 'Yes'                                                  
              , 997569876                                             
              , 101325587                                             
    I don't know how to format them like you did in your reply, so they look like a quote, so I hope that just pasting them in is okay.

  • Changing listening port for SSH on IDS

    What command would I use to change the listening port on a 4200 series IDS? I have it listening on another port, and when I applied the S189/S190 update, it changed SSH back to port 22.
    Just out of curiosity too, does anyone know what else the S189/S190 updates change?
    Thanks,
    Jim

    After looking around, I think it may be the /etc/ssh/sshd_config file that needs to be modified. However, I wanted to double check that with the community. If I modify that file and restart ssh, will I mess anything up and lock myself out of remote access?
    Thanks!!

Maybe you are looking for