Cisco 1721 access-list issue

[Steve Bowman]

This would be a simple config
I can get outside from inside
but the static map nor the access-list 110 permits access
to the internal web server

What am I missing ?

!
version 12.2
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Priority
!
enable secret 5 xyz/
enable password xyz
!
clock timezone EST -5
ip subnet-zero
ip name-server 205.152.144.235
ip name-server 205.152.132.235
!
!
!
!
interface FastEthernet0
ip address 192.168.1.254 255.255.255.0
ip nat inside
speed auto
half-duplex
!
interface Serial0
bandwidth 1536
ip address xx.xxx.xxx.250 255.255.255.252
ip access-group 110 in
ip nat outside
encapsulation frame-relay IETF
frame-relay interface-dlci 502
frame-relay lmi-type ansi
!
ip nat pool natmain xxx.xxx.xxx.128 xxx.xxx.xxx.128 netmask 255.255.255.224
ip nat inside source list 101 interface Serial0 overload
ip nat inside source route-map nonat pool natmain overload
ip nat inside source static 192.168.1.69 xxx.xxx.xxx.130
ip classless
ip route 0.0.0.0 0.0.0.0 xxx.xxx.xxx.249
no ip http server
!
!
access-list 110 permit tcp any host xxx.xxx.xxx.130 eq www
!
line con 0
line aux 0
line vty 0 4
password xxxxxxxxxxxxxx
login
!
end


Steve Bowman
steve@independenttech.net
Independent Technology, Inc.
CA, USA

 

[rtfmdude]

this should git her done:

http://tinyurl.com/aq8yh

 

[ChrisAC]

Are you seeing hits against the access-list? What does a 'sh ip nat trans' show you?

Chris.

**********************
Chris A.C, CCNA, CCSA
**********************