NAT is working well for my internal network E1, but i'm finding it very difficult to foward any ports from the internet through the router into a host on my network. I've double checked I can hook my modem that is connected to E0 directly to a host and the webserver works fine?
Here's my current config:
Here's the translations taking place notice the lack of http to the global section?:
and finally here's my interface lists:
Here's my current config:
Code:
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname orion
!
enable secret 5 $1$3E36$XQI7w0f7B756heocc09i3/
enable password 7 03105E18125770
!
ip subnet-zero
no ip domain-lookup
ip name-server 207.127.204.8
ip name-server 216.148.227.204
ip name-server 204.127.202.19
ip name-server 216.148.227.79
ip dhcp excluded-address 192.168.1.1
ip dhcp excluded-address 192.168.1.2
!
ip dhcp pool CLIENT
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 204.127.204.8 216.148.227.204
!
!
!
!
interface Loopback0
no ip address
!
interface Ethernet0
description Connection to WAN
ip address dhcp
ip nat outside
no ip route-cache
no ip mroute-cache
no cdp enable
!
interface Ethernet1
description Connection to LAN
ip address 192.168.1.1 255.255.255.0
ip nat inside
no ip route-cache
no ip mroute-cache
no cdp enable
!
interface Serial0
bandwidth 64
no ip address
no ip route-cache
no ip mroute-cache
shutdown
!
interface Serial1
bandwidth 64
no ip address
no ip route-cache
no ip mroute-cache
shutdown
clock rate 64000
!
ip nat inside source list 102 interface Ethernet0 overload
ip nat inside source static tcp 192.168.1.2 80 interface Ethernet0 80
ip classless
no ip http server
no ip pim bidir-enable
!
access-list 102 permit ip 192.168.1.0 0.0.0.255 any
!
banner motd
Welcome to host ORION, usage is monitored
!
line con 0
exec-timeout 0 0
password 7 06120A32581658
logging synchronous
login
line aux 0
transport input all
line vty 0 4
password 7 131112011F5455
login
!
end
Code:
orion#sh ip nat translationsPro Inside global Inside local Outside local Outside globaltcp 66.177.19.27:1026 192.168.1.2:1026 64.94.110.11:80 64.94.110.11:80tcp 66.177.19.27:1112 192.168.1.2:1112 216.239.53.99:80 216.239.53.99:80tcp 66.177.19.27:1256 192.168.1.2:1256 66.132.172.9:143 66.132.172.9:143tcp 66.177.19.27:1253 192.168.1.2:1253 66.35.133.90:143 66.35.133.90:143tcp 66.177.19.27:1263 192.168.1.2:1263 66.35.133.90:143 66.35.133.90:143udp 66.177.19.27:1037 192.168.1.2:1037 207.127.204.8:53 207.127.204.8:53tcp 66.177.19.27:80 192.168.1.2:80 --- ---udp 66.177.19.27:1037 192.168.1.2:1037 216.148.227.204:53 216.148.227.204:53
Code:
orion#sh ip int briefInterface IP-Address OK? Method Status ProtocolEthernet0 66.177.19.27 YES DHCP up up Ethernet1 192.168.1.1 YES NVRAM up up Loopback0 unassigned YES NVRAM up up Serial0 unassigned YES NVRAM administratively down down Serial1 unassigned YES NVRAM administratively down down