I have an internal web server on port 80. I need help commands maybe to configure port forwarding to access the server on my private network from a public IP
Current running config
interface Tunnel1
ip unnumbered GigabitEthernet0/0/0
tunnel source X.139.250.X
tunnel mode ipsec ipv4
tunnel destination X.232.253.X
tunnel protection ipsec profile 3DESMD5
!
interface Tunnel2
ip unnumbered GigabitEthernet0/0/0
tunnel source X.139.250.X
tunnel mode ipsec ipv4
tunnel destination X.232.2.X
tunnel protection ipsec profile 3DESMD5
!
interface GigabitEthernet0/0/0
description SAF WAN
ip address X.139.250.X 255.255.255.0
ip nat outside
negotiation auto
!
interface GigabitEthernet0/0/1
description LAN
ip address X.21.10.X 255.255.255.0
ip nat inside
negotiation auto
!
interface GigabitEthernet0/0/2
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0
vrf forwarding Mgmt-intf
no ip address
shutdown
negotiation auto
!
interface Vlan1
no ip address
shutdown
!
ip nat inside source list 102 interface GigabitEthernet0/0/0 overload
ip forward-protocol nd
no ip http server
no ip http secure-server
ip tftp source-interface GigabitEthernet0
ip route 0.0.0.0 0.0.0.0 X.139.250.220
ip route X.31.15.X 255.255.255.0 Tunnel1 name VPN-HQ(/24)
ip route X.31.40.X 255.255.252.0 Tunnel2 name VPN-PALE
ip route X.32.0.X 255.255.0.0 Tunnel1 name VPN-HQ(/16)
!
!
access-list 102 permit ip X.21.10.X 0.0.0.255 any
!
!
!
control-plane
!
!
192.0.2.0/24
,198.51.100.0/24
, and203.0.113.0/24
. Use them in place of any public addressing (private addressing is fine to post as it is), and network engineers will understand that those are not real addresses, but they are addresses that can be mocked up and tested.