Port address translation Cisco 761

[maxcolmer25]

Hi,

I posted a thread earlier about template for 761 to which i no longer need. I downloaded Cisco fast step software web site which was great help. At the moment i can connect to internet no problem but problem is that the 761 is going into checkpoint firewall that is properly configured for site to site VPN. When i try to ping remote office internal subnet it times out. I am not fimilar with 700 series routers and read that they do not support NAT but support PAT which i also know little about.

below is what my current config looks like and any help, commands ect is much appreciated

Thanks in advance
Max
CD

SET SCREENLENGTH 20

SET COUNTRYGROUP 2

SET LAN MODE ANY

SET WAN MODE ONLY

SET AGE OFF

SET MULTIDESTINATION OFF

SET SWITCH NET3

SET ALAWVOICE ON

SET INTERNALTONES NONE

SET 1 DELAY 30

SET 2 DELAY 30

SET BRIDGING ON

SET LEARN ON

SET PASSTHRU OFF

SET SPEED AUTO

SET PLAN NORMAL

SET 1 AUTO ON

SET 2 AUTO ON

SET 1 NUMBER

SET 2 NUMBER

SET 1 BACKUPNUMBER

SET 2 BACKUPNUMBER

SET 1 RINGBACK

SET 2 RINGBACK

SET 1 CLIVALIDATENUMBER

SET 2 CLIVALIDATENUMBER

SET CLICALLBACK OFF

SET CLIAUTHENTICATION OFF

SET SYSTEMNAME kilpisdn

LOG CALLS TIME VERBOSE

SET UNICASTFILTER OFF

DEMAND 1 THRESHOLD 0

DEMAND 2 THRESHOLD 48

DEMAND 1 DURATION 1

DEMAND 2 DURATION 1

DEMAND 1 SOURCE LAN

DEMAND 2 SOURCE BOTH

TIMEOUT 1 THRESHOLD 0

TIMEOUT 2 THRESHOLD 48

TIMEOUT 1 DURATION 0

TIMEOUT 2 DURATION 0

TIMEOUT 1 SOURCE LAN

TIMEOUT 2 SOURCE BOTH

SET AOCDTIMEOUT OFF

SET REMOTEACCESS PROTECTED

SET LOCALACCESS ON

SET LOGOUT 20

SET CALLERID OFF

SET PPP AUTHENTICATION IN CHAP PAP

SET PPP CHAPREFUSE NONE

SET PPP CHAPALLOW MULTIHOST OFF

SET PPP MAGICNUMBERCHECK ON

SET PPP AUTHENTICATION OUT NONE

SET PPP AUTHENTICATION ACCEPT EITHER

SET PPP TAS CLIENT 0.0.0.0

SET PPP TAS CHAPSECRET LOCAL ON

SET PPP PASSWORD CLIENT ENCRYPTED 0822435xxx480b1a4a

SET PPP SECRET CLIENT ENCRYPTED 0110091053xxx279

SET PPP PASSWORD HOST ENCRYPTED 06050035xxx7145d

SET PPP SECRET HOST ENCRYPTED 070c2e584xxx084f

SET PPP CALLBACK REQUEST OFF

SET PPP CALLBACK REPLY OFF

SET PPP NEGOTIATION INTEGRITY 10

SET PPP NEGOTIATION COUNT 10

SET PPP NEGOTIATION RETRY 3000

SET PPP TERMREQ COUNT 2

SET PPP MULTILINK ON

SET PPP MULTILINK PPPHEADER ON

SET COMPRESSION STAC

SET PPP BACP ON

SET PPP ADDRESS NEGOTIATION LOCAL OFF

SET PPP IP NETMASK LOCAL OFF

SET IP PAT UDPTIMEOUT 5

SET IP PAT TCPTIMEOUT 30

SET IP RIP TIME 30

SET CALLDURATION 0

SET SNMP CONTACT ""

SET SNMP LOCATION ""

SET SNMP TRAP COLDSTART OFF

SET SNMP TRAP WARMSTART OFF

SET SNMP TRAP LINKDOWN OFF

SET SNMP TRAP LINKUP OFF

SET SNMP TRAP AUTHENTICATIONFAIL OFF

SET DHCP OFF

SET DHCP DOMAIN

SET DHCP NETBIOS_SCOPE

SET VOICEPRIORITY INCOMING INTERFACE PHONE1 ALWAYS

SET VOICEPRIORITY OUTGOING INTERFACE PHONE1 ALWAYS

SET CALLWAITING INTERFACE PHONE1 ON

SET VOICEPRIORITY INCOMING INTERFACE PHONE2 ALWAYS

SET VOICEPRIORITY OUTGOING INTERFACE PHONE2 ALWAYS

SET CALLWAITING INTERFACE PHONE2 ON

SET CALLTIME VOICE INCOMING OFF

SET CALLTIME VOICE OUTGOING OFF

SET CALLTIME DATA INCOMING OFF

SET CALLTIME DATA OUTGOING OFF

SET USER LAN

SET IP ROUTING ON

SET IP ADDRESS 192.168.1.x

SET IP NETMASK 255.255.255.0

SET IP FRAMING ETHERNET_II

SET IP PROPAGATE ON

SET IP COST 1

SET IP RIP RECEIVE V1

SET IP RIP UPDATE OFF

SET IP RIP VERSION 1

SET IP FILTER UDP IN SOURCE 0.0.0.0/0:137-138 BLOCK

SET IP FILTER TCP IN SOURCE 0.0.0.0/0:139 BLOCK

SET IP FILTER UDP IN SOURCE 0.0.0.0/0:137-138 BLOCK

SET IP FILTER TCP IN SOURCE 0.0.0.0/0:139 BLOCK

SET IP FILTER UDP IN SOURCE 0.0.0.0/0:137-138 BLOCK

SET IP FILTER TCP IN SOURCE 0.0.0.0/0:139 BLOCK

SET IP FILTER UDP IN SOURCE 0.0.0.0/0:137-138 BLOCK

SET IP FILTER TCP IN SOURCE 0.0.0.0/0:139 BLOCK

SET USER Internal

SET SUBNET 255.255.255.0

SET IP ROUTING OFF

SET IP ADDRESS 0.0.0.0

SET IP NETMASK 255.255.255.0

SET IP FRAMING ETHERNET_II

SET USER Standard

SET PROFILE ID 000000000000

SET PROFILE POWERUP ACTIVATE

SET PROFILE DISCONNECT KEEP

SET IP ROUTING ON

SET IP ADDRESS 0.0.0.0

SET IP NETMASK 0.0.0.0

SET IP FRAMING NONE

SET IP RIP RECEIVE V1

SET IP RIP UPDATE OFF

SET IP RIP VERSION 1

SET NETBIOS FILTER ON

SET USER RemoteNet

SET PROFILE ID 000000000000

SET PROFILE POWERUP ACTIVATE

SET PROFILE DISCONNECT KEEP

SET BRIDGING OFF

SET 1 NUMBER 189xx331xx

SET 2 NUMBER 189xx331xx

TIMEOUT 1 THRESHOLD 20

TIMEOUT 2 THRESHOLD 48

TIMEOUT 1 DURATION 360

TIMEOUT 2 DURATION 60

TIMEOUT 1 SOURCE BOTH

TIMEOUT 2 SOURCE BOTH

SET PPP ADDRESS NEGOTIATION LOCAL ON

SET IP ROUTING ON

SET IP ADDRESS 0.0.0.0

SET IP NETMASK 0.0.0.0

SET IP FRAMING NONE

SET IP RIP RECEIVE V1

SET IP RIP UPDATE OFF

SET IP RIP VERSION 1

SET IP PAT ON

SET NETBIOS FILTER ON

SET IP ROUTE DEST 0.0.0.0/0 GATEWAY 0.0.0.0 PROPAGATE ON COST 1

SET IP FILTER UDP IN SOURCE 0.0.0.0/0:137-138 BLOCK

SET IP FILTER TCP IN SOURCE 0.0.0.0/0:139 BLOCK

SET IP FILTER UDP IN SOURCE 0.0.0.0/0:137-138 BLOCK

SET IP FILTER TCP IN SOURCE 0.0.0.0/0:139 BLOCK

SET IP FILTER UDP IN SOURCE 0.0.0.0/0:137-138 BLOCK

SET IP FILTER TCP IN SOURCE 0.0.0.0/0:139 BLOCK

SET IP FILTER UDP IN SOURCE 0.0.0.0/0:137-138 BLOCK

SET IP FILTER TCP IN SOURCE 0.0.0.0/0:139 BLOCK

CD

LOGOUT

kilpisdn>

 

[andf1]

There are many sample configuration here that might of help to you:

http://www.cisco.com/en/US/products...s_configuration_example09186a0080094339.shtml

andf1