Folks,
I'm trying to allow 'novncproxy' access to my openstack lab host through my CRS125.

The iptables rule Openstack puts in place on the cloud controller host is:

ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 multiport dports 6080 /* 001 novncproxy incoming */

The NAT rule I have in place on my CRS is:

chain=dstnat action=dst-nat to-addresses=10.0.10.55 to-ports=6080 protocol=tcp dst-address=192.168.1.50
dst-port=6080

192.168.1.50 being the external interface and 10.0.10.55 being the destination Openstack device.

I've done similar for HTTP traffic and that's working fine. But the novnc traffic isn't forwarding properly - it just times out. Other hosts on the same switch group (rather than being routed) are able to use this host's novncproxy web console service just fine.

Any ideas?