Cisco 678 -- How do I configure it to use my 5 public, static IP's?

Oct 02, 2004 0 Replies

I have 5 public, static ip addresses leased plus 3 more reserved. The range is:


63.x.x.n (reserved network)
63.x.x.n+1 (user assignable)
63.x.x.n+2 (user assignable)
63.x.x.n+3 (user assignable)
63.x.x.n+4 (user assignable)
63.x.x.n+5 (user assignable)
63.x.x.n+6 (reserved gateway)
63.x.x.n+7 (reserved broadcast)

I have an internal network running on 192.168.0.x that has 2 webservers that the public internet needs to get to. When I had my Cisco 675, I simply enabled NAT and added NAT entries as follows:



set nat add entry 63.x.x.n+1 80 192.168.0.2 80 tcp set nat add entry 63.x.x.n+2 80 192.168.0.3 80 tcp



now any public HTTP traffic for 63.x.x.n+1 would go to my internal webserver @ 192.168.0.2 and HTTP traffic for 63.x.x.n+2 would go to



192.168.0.3.

This procedure does not work on my Cisco 678. Will someone please let me know what I have to do in order to utilize my 5 public static IP addresses again? When I say "does not work" I mean the

formatting link
which is associated to 63.x.x.n+1 is not accessible via the public internet. I have verified that the webserver is functioning internally at http://localhost. Note:
formatting link
goes to 63.x.x.n+2 although this is not configured yet. I do not want to give my webservers the public static IPs, I want to use NAT to forward the public static ips to internal static IPs.



Here is some diagnostic info off the 678:



cbos#sho nat



NAT is currently enabled



Port Network Global eth0 Inside wan0-0 Outside 63.x.x.n #reserved gateway IP vip0 Outside vip1 Outside vip2 Outside



Local IP : Port Global IP : Port Timer Flags Proto Interface



192.168.0.2:80 63.x.x.n+1:80 0 0x00041 tcp eth0
192.168.0.2:80 63.x.x.n+1:80 0 0x00041 udp eth0

## where eth0 is Inside and using 192.168.0.1


cbos#sho int IP Address Mask eth0 192.168.0.1 255.255.255.240



vip0 0.0.0.0 255.255.255.248



vip1 0.0.0.0 255.255.255.0



vip2 0.0.0.0 255.255.255.0



wan0 Physical Port: Trained



Dest IP Address Mask wan0-0 207.x.x.x 255.255.255.255 # configured via IPCP


Any help would be greatly appreciated!



Thanks in advance,


-geoff.



Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required