Why Doesn't This config Port Forward Correctly

[baldhead]

I've allowed everything to make sure there's not something being denied and the router still isn't port forwarding to two of my internal machines. This is all on a Cisco 806 router. The IOS is: c806-oy6-mz.122-2.XK2.bin. Here's the config. The internal machines are listening on these ports. One is waiting for a vnc connection and the other a Terminal Server connection. What problems do you guys see here? And what do you recommend I try?

no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Admin806
!

!
ip subnet-zero
ip name-server 192.168.7.1
!
!
!
!
interface Ethernet0
description Private LAN
ip address 10.10.10.1 255.0.0.0
ip broadcast-address 10.255.255.255
ip nat inside
no cdp enable
hold-queue 100 out
!
interface Ethernet1
description Public WAN
ip address 192.168.7.59 255.255.255.0
ip access-group 2 in
ip nat outside
no cdp enable
!
ip nat inside source list 1 interface Ethernet1 overload
ip nat inside source static tcp 10.10.10.2 5900 interface Ethernet1 5900
ip nat inside source static tcp 10.10.10.3 3098 interface Ethernet1 3098
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.7.3
no ip http server
!
access-list 1 permit 10.0.0.0 0.255.255.255
access-list 2 permit any
access-list 100 permit ip any any
no cdp run

etc..
etc...

thanks
baldhead

 

[gconnect]

you may need to use the extendable option

ip nat inside source static tcp 10.10.10.2 5900 192.168.7.59  5900 extendable 
ip nat inside source static tcp 10.10.10.3 3098 192.168.7.59  3098 extendable

-gC-

 

[baldhead]

any other advice. I tried it with the extendable option and had the same luck. One of the weird things about the router is that I can ping 10.10.10.2 and not ping 10.10.10.3 and then other times I can ping 10.10.10.3 and not 10.10.10.2. Is there a debug command I can use to see what is occuring? What else can I try to troubleshoot this problem?

Here is the modified config:

no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Admin806
!

!
ip subnet-zero
ip name-server 192.168.7.1
!
!
!
!
interface Ethernet0
description Private LAN
ip address 10.10.10.1 255.0.0.0
ip broadcast-address 10.255.255.255
ip nat inside
no cdp enable
hold-queue 100 out
!
interface Ethernet1
description Public WAN
ip address 192.168.7.59 255.255.255.0
ip nat outside
no cdp enable
!
ip nat inside source list 1 interface Ethernet1 overload
ip nat inside source static tcp 10.10.10.3 3098 192.168.7.59 3098 extendable
ip nat inside source static tcp 10.10.10.2 5900 192.168.7.59 5900 extendable
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.7.3
no ip http server
!
access-list 1 permit 10.0.0.0 0.255.255.255
access-list 2 permit any
access-list 100 permit ip any any
no cdp run

thanks
baldhead