DomiNosroB
Technical User
Hi,
I have a Cisco 827 that I use as a dsl router. I have an outside host that running MRTG and needs to be able to get info from this box. I think my problem is that I am NATing all traffic to the address 192.168.1.2 and I need to be PATing ports 161 and 162 to the loopback before I NAT everything else. Am I on the right track? If so, is there a way to change the 'ip nat' entries order around.
Your help is greatly appreciated.
Thanks,
Robert
The configuration is as follows:
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname host
!
no logging buffered
no logging console
no logging monitor
enable secret 5 $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
enable password **************** encrypte
!
!
!
!
!
ip subnet-zero
ip telnet source-interface Ethernet0
no ip domain-lookup
ip name-server 204.96.17.141
ip name-server 204.96.16.141
!
!
!
!
interface Loopback0
ip address 172.0.0.1 255.255.255.255
no ip directed-broadcast
!
interface Ethernet0
ip address 192.168.1.254 255.255.255.0
no ip directed-broadcast
ip nat inside
no ip mroute-cache
!
interface ATM0
no ip address
ip directed-broadcast
ip nat outside
atm ilmi-keepalive
pvc 0/100
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
bundle-enable
hold-queue 224 in
!
interface Dialer0
ip address 198.x.x.x 255.255.255.248
no ip directed-broadcast
ip nat outside
encapsulation ppp
dialer pool 1
dialer-group 2
ppp chap hostname hostname
ppp chap password 7 password
!
ip nat inside source static 192.168.1.2 198.x.x.x
ip nat outside source static tcp 198.x.x.x 162 172.0.0.1 162 extendable
ip nat outside source static tcp 198.x.x.x 161 172.0.0.1 161 extendable
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
no ip http server
!
dialer-list 2 protocol ip permit
snmp-server engineID local 00000009010000A1C646A5E6
snmp-server community intmon4395 RW
snmp-server community SNMPv1 view v1default RO
snmp-server trap-source Loopback0
snmp-server enable traps snmp
snmp-server enable traps rsvp
snmp-server host 172.0.0.1 SNMPv1
!
line con 0
password #######
login
transport input none
stopbits 1
line vty 0 4
password #######
login
!
scheduler max-task-time 5000
I have a Cisco 827 that I use as a dsl router. I have an outside host that running MRTG and needs to be able to get info from this box. I think my problem is that I am NATing all traffic to the address 192.168.1.2 and I need to be PATing ports 161 and 162 to the loopback before I NAT everything else. Am I on the right track? If so, is there a way to change the 'ip nat' entries order around.
Your help is greatly appreciated.
Thanks,
Robert
The configuration is as follows:
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname host
!
no logging buffered
no logging console
no logging monitor
enable secret 5 $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
enable password **************** encrypte
!
!
!
!
!
ip subnet-zero
ip telnet source-interface Ethernet0
no ip domain-lookup
ip name-server 204.96.17.141
ip name-server 204.96.16.141
!
!
!
!
interface Loopback0
ip address 172.0.0.1 255.255.255.255
no ip directed-broadcast
!
interface Ethernet0
ip address 192.168.1.254 255.255.255.0
no ip directed-broadcast
ip nat inside
no ip mroute-cache
!
interface ATM0
no ip address
ip directed-broadcast
ip nat outside
atm ilmi-keepalive
pvc 0/100
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
bundle-enable
hold-queue 224 in
!
interface Dialer0
ip address 198.x.x.x 255.255.255.248
no ip directed-broadcast
ip nat outside
encapsulation ppp
dialer pool 1
dialer-group 2
ppp chap hostname hostname
ppp chap password 7 password
!
ip nat inside source static 192.168.1.2 198.x.x.x
ip nat outside source static tcp 198.x.x.x 162 172.0.0.1 162 extendable
ip nat outside source static tcp 198.x.x.x 161 172.0.0.1 161 extendable
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer0
no ip http server
!
dialer-list 2 protocol ip permit
snmp-server engineID local 00000009010000A1C646A5E6
snmp-server community intmon4395 RW
snmp-server community SNMPv1 view v1default RO
snmp-server trap-source Loopback0
snmp-server enable traps snmp
snmp-server enable traps rsvp
snmp-server host 172.0.0.1 SNMPv1
!
line con 0
password #######
login
transport input none
stopbits 1
line vty 0 4
password #######
login
!
scheduler max-task-time 5000
