NAT Internet Access to inside server.

Dec 15, 2006 2 Replies

Good Day! Please help me. How I must config nat on cisco 2600 to access my internal server on port 32411 . What is Wrong ?



Internet --- (FastEthernet0/1) Cisco (FastEthernet0/0) --- Server


interface FastEthernet0/0 ip address 10.99.115.254 255.255.255.0 ip nat inside no ip route-cache no ip mroute-cache duplex auto speed auto ! ! interface FastEthernet0/1 ip address 222.222.222.222 255.255.255.248 ip nat outside duplex auto speed auto



ip nat inside source static tcp 10.99.115.10 32411 222.222.222.222



32411 extendable no-alias

Hi,

Looks alright .... can you post the sh ip nat trans and can you ping the server from your internal interface of the router.

-Aman Ne> Good Day! Please help me. How I must config nat on cisco 2600 to access

I have a tipe Connection

  1. Connect direct to Cisco with dialup
  2. From the internet

Building configuration...

Current configuration : 1637 bytes ! version 12.2 service timestamps debug uptime service timestamps log uptime service password-encryption ! hostname RSM_e ! aaa new-model ! ! aaa authentication login default local aaa authentication ppp default local aaa authorization exec default local aaa session-id common enable secret 5 $1$pu.0$ ! username ppp nohangup password 7 140 username ppp autocommand ppp username test nohangup password 7 0107 username adm password 7 094 ip subnet-zero ! ! ! ip address-pool local ! ! ! interface FastEthernet0/0 ip address 10.99.115.254 255.255.255.0 ip nat inside no ip route-cache no ip mroute-cache duplex auto speed auto ! interface Serial0/0 no ip address shutdown no fair-queue ! interface FastEthernet0/1 ip address xxx.106.xxx.222 255.255.255.248 ip nat outside duplex auto speed auto ! interface Group-Async1 ip unnumbered FastEthernet0/0 encapsulation ppp ip tcp header-compression passive async mode interactive peer default ip address pool default ppp authentication ms-chap group-range 33 40 ! ip local pool default 192.168.0.1 192.168.0.8 ip nat inside source static tcp 10.99.115.10 32410 xxx.106.xxx.222

32410 extendable no-alias ip nat inside source static tcp 10.99.115.10 32460 xxx.106.xxx.222 32460 extendable no-alias ip nat inside source static tcp 10.99.115.10 32411 xxx.106.xxx.222 32411 extendable no-alias ip classless ip route profile ip route 0.0.0.0 0.0.0.0 xxx.106.xxx.217 ip http server ip pim bidir-enable ! ! ! line con 0 line 33 40 modem InOut transport input all autoselect during-login autoselect ppp line aux 0 line vty 0 4 ! ! end

RSM_RSO-A#sh ip nat translations Pro Inside global Inside local Outside local Outside global tcp xxx.106.xxx.222:32411 10.99.115.10:32411 192.168.0.8:2942

192.168.0.8:2942 tcp xxx.106.xxx.222:32411 10.99.115.10:32411 192.168.0.1:3079 192.168.0.1:3079 tcp xxx.106.xxx.222:32411 10.99.115.10:32411 192.168.0.5:1167 192.168.0.5:1167

Who connect over dialup - OK

Who connect over internet can not access to 10.99.115.10:32411

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required