diff --git a/lib/vagrant-lxc/action/forward_ports.rb b/lib/vagrant-lxc/action/forward_ports.rb
new file mode 100644
index 0000000..892ae00
--- /dev/null
+++ b/lib/vagrant-lxc/action/forward_ports.rb
@@ -0,0 +1,83 @@
+module Vagrant
+  module LXC
+    module Action
+      class ForwardPorts
+        def initialize(app, env)
+          @app    = app
+          @logger = Log4r::Logger.new("vagrant::lxc::action::forward_ports")
+        end
+
+        def call(env)
+          @env = env
+
+          # Continue, we need the VM to be booted in order to grab its IP
+          @app.call env
+
+          # Get the ports we're forwarding
+          env[:forwarded_ports] = compile_forwarded_ports(env[:machine].config)
+
+          # Warn if we're port forwarding to any privileged ports
+          env[:forwarded_ports].each do |fp|
+            if fp[:host] <= 1024
+              env[:ui].warn I18n.t("vagrant.actions.vm.forward_ports.privileged_ports")
+              break
+            end
+          end
+
+          env[:ui].info I18n.t("vagrant.actions.vm.forward_ports.forwarding")
+          forward_ports
+        end
+
+        def forward_ports
+          @container_ip = @env[:machine].provider.container.assigned_ip
+
+          @env[:forwarded_ports].each do |fp|
+            message_attributes = {
+              # TODO: Add support for multiple adapters
+              :adapter    => 'eth0',
+              :guest_port => fp[:guest],
+              :host_port  => fp[:host]
+            }
+
+            # TODO: Remove adapter from logging
+            @env[:ui].info(I18n.t("vagrant.actions.vm.forward_ports.forwarding_entry",
+                                  message_attributes))
+
+            redir_pid = redirect_port(fp[:host], fp[:guest])
+            store_redir_pid(fp[:host], redir_pid)
+          end
+        end
+
+        private
+
+        def compile_forwarded_ports(config)
+          mappings = {}
+
+          config.vm.networks.each do |type, options|
+            if type == :forwarded_port
+              mappings[options[:host]] = options
+            end
+          end
+
+          mappings.values
+        end
+
+        def redirect_port(host, guest)
+          redir_cmd = "sudo redir --laddr=127.0.0.1 --lport=#{host} --cport=#{guest} --caddr=#{@container_ip}"
+
+          @logger.debug "Forwarding port with `#{redir_cmd}`"
+          fork { exec redir_cmd }
+        end
+
+        def store_redir_pid(host_port, redir_pid)
+          data_dir = @env[:machine].data_dir.join('pids')
+          data_dir.mkdir unless data_dir.directory?
+
+          data_dir.join("redir_#{host_port}.pid").open('w') do |pid_file|
+            pid_file.write(redir_pid)
+          end
+        end
+      end
+    end
+  end
+end
diff --git a/spec/unit/action/forward_ports_spec.rb b/spec/unit/action/forward_ports_spec.rb
new file mode 100644
index 0000000..2d92594
--- /dev/null
+++ b/spec/unit/action/forward_ports_spec.rb
@@ -0,0 +1,42 @@
+require 'unit_helper'
+
+require 'i18n'
+require 'vagrant-lxc/action/forward_ports'
+
+describe Vagrant::LXC::Action::ForwardPorts do
+  let(:app)          { mock(:app, call: true) }
+  let(:env)          { {machine: machine, ui: stub(info: true)} }
+  let(:machine)      { mock(:machine) }
+  let!(:data_dir)    { Pathname.new(Dir.mktmpdir) }
+  let(:networks)     { [[:other_config, {}], [:forwarded_port, {guest: guest_port, host: host_port}]] }
+  let(:host_port)    { 8080 }
+  let(:guest_port)   { 80 }
+  let(:provider)     { fire_double('Vagrant::LXC::Provider', container: container) }
+  let(:container)    { fire_double('Vagrant::LXC::Container', assigned_ip: container_ip) }
+  let(:container_ip) { '10.0.1.234' }
+  let(:pid)          { 'a-pid' }
+
+  subject { described_class.new(app, env) }
+
+  before do
+    machine.stub_chain(:config, :vm, :networks).and_return(networks)
+    machine.stub(provider: provider, data_dir: data_dir)
+
+    subject.stub(exec: true)
+    subject.stub(:fork) { |&block| block.call; pid }
+    subject.call(env)
+  end
+
+  after { FileUtils.rm_rf data_dir.to_s }
+
+  it 'forwards ports using redir' do
+    subject.should have_received(:exec).with(
+      "sudo redir --laddr=127.0.0.1 --lport=#{host_port} --cport=#{guest_port} --caddr=#{container_ip}"
+    )
+  end
+
+  it "stores redir pids on machine's data dir" do
+    pid_file = data_dir.join('pids', "redir_#{host_port}.pid").read
+    pid_file.should == pid
+  end
+end