Cisco 678 -- How do I configure it to use my 5 public, static IP's?

I have 5 public, static ip addresses leased plus 3 more reserved. The range is:

63.x.x.n (reserved network) 63.x.x.n+1 (user assignable) 63.x.x.n+2 (user assignable) 63.x.x.n+3 (user assignable) 63.x.x.n+4 (user assignable) 63.x.x.n+5 (user assignable) 63.x.x.n+6 (reserved gateway) 63.x.x.n+7 (reserved broadcast)

I have an internal network running on 192.168.0.x that has 2 webservers that the public internet needs to get to. When I had my Cisco 675, I simply enabled NAT and added NAT entries as follows:

set nat add entry 63.x.x.n+1 80 192.168.0.2 80 tcp set nat add entry 63.x.x.n+2 80 192.168.0.3 80 tcp

now any public HTTP traffic for 63.x.x.n+1 would go to my internal webserver @ 192.168.0.2 and HTTP traffic for 63.x.x.n+2 would go to

192.168.0.3.

This procedure does not work on my Cisco 678. Will someone please let me know what I have to do in order to utilize my 5 public static IP addresses again? When I say "does not work" I mean the

formatting link
which is associated to 63.x.x.n+1 is not accessible via the public internet. I have verified that the webserver is functioning internally at http://localhost. Note:
formatting link
goes to 63.x.x.n+2 although this is not configured yet. I do not want to give my webservers the public static IPs, I want to use NAT to forward the public static ips to internal static IPs.

Here is some diagnostic info off the 678:

cbos#sho nat

NAT is currently enabled

Port Network Global eth0 Inside wan0-0 Outside 63.x.x.n #reserved gateway IP vip0 Outside vip1 Outside vip2 Outside

Local IP : Port Global IP : Port Timer Flags Proto Interface

192.168.0.2:80 63.x.x.n+1:80 0 0x00041 tcp eth0 192.168.0.2:80 63.x.x.n+1:80 0 0x00041 udp eth0

## where eth0 is Inside and using 192.168.0.1

cbos#sho int IP Address Mask eth0 192.168.0.1 255.255.255.240

vip0 0.0.0.0 255.255.255.248

vip1 0.0.0.0 255.255.255.0

vip2 0.0.0.0 255.255.255.0

wan0 Physical Port: Trained

Dest IP Address Mask wan0-0 207.x.x.x 255.255.255.255 # configured via IPCP

Any help would be greatly appreciated!

Thanks in advance,

-geoff.

Reply to
geeoff
Loading thread data ...

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.