topic Need help setting up static NAT to internal server in Network Security https://community.cisco.com/t5/network-security/need-help-setting-up-static-nat-to-internal-server/m-p/2115435#M394074 <HTML><HEAD></HEAD><BODY><P>Can you pls advise what exactly you have configured? as what you have posted as the command doesn't match your configuration.</P><P>There is no ACL 150, and there is no ip range of 192.168.5.x.</P></BODY></HTML> Mon, 17 Dec 2012 05:19:26 GMT Jennifer Halim 2012-12-17T05:19:26Z Need help setting up static NAT to internal server https://community.cisco.com/t5/network-security/need-help-setting-up-static-nat-to-internal-server/m-p/2115434#M394073 <P><SPAN style="font-family: verdana, geneva;">One of my internal servers requires it to be available to the internet I am having a hard time allowing it to be NATed through my Ciscc 2801 router. It seems as though im missing something small. From what I can gather it seems as though its as issue with ACL, but im not sure. I have ran the following command: <SPAN style="white-space: pre;">ip nat inside source static tcp 192.168.5.1 ***WAN IP Address*** 8443 extendable </SPAN><SPAN style="white-space: pre;">Then I tried to add it to the ACL</SPAN></SPAN></P><P><SPAN style="font-family: verdana, geneva;"><SPAN style="white-space: pre;">via this command: </SPAN><SPAN style="white-space: pre;">access-list 150 permit tcp any host ***WAN IP Address*** eq 8443</SPAN></SPAN></P><P></P><P></P><P><SPAN style="white-space: pre; font-family: verdana, geneva;">Here is a copy of my config. Please advise. Thanks. </SPAN></P><P></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">IP&nbsp;&nbsp;&nbsp; 172.19.3.x</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">sub 255.255.255.128</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">GW 172.19.3.129</SPAN></P><P style="border-collapse: collapse; list-style-type: none; min-height: 8pt;"><SPAN style="font-family: verdana, geneva;"> </SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;"><STRONG style="border-collapse: collapse; font-size: 12px; list-style-type: none;"> Ciscso 2801 Router</STRONG></SPAN></P><P style="border-collapse: collapse; list-style-type: none; min-height: 8pt;"><SPAN style="font-family: verdana, geneva;"> </SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">Current configuration : 11858 bytes</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">version 12.4</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">service timestamps debug datetime localtime</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">service timestamps log datetime localtime show-timezone</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">service password-encryption</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">hostname router-2801</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">boot-start-marker</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">boot-end-marker</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">logging message-counter syslog</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">logging buffered 4096</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">aaa new-model</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">aaa authentication login userauthen group radius local</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">aaa authorization network groupauthor local</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">aaa session-id common</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">clock timezone est -5</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">clock summer-time zone recurring last Sun Mar 2:00 1 Sun Nov 2:00</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">dot11 syslog</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip source-route</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip dhcp excluded-address 172.19.3.129 172.19.3.149</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip dhcp excluded-address 172.19.10.1 172.19.10.253</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip dhcp excluded-address 172.19.3.140</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip dhcp ping timeout 900</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip dhcp pool DHCP</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; network 172.19.3.128 255.255.255.128</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; default-router 172.19.3.129</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; domain-name domain.local</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; netbios-name-server 172.19.3.7</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; option 66 ascii 172.19.3.225</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; dns-server 172.19.3.140 208.67.220.220 208.67.222.222</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip dhcp pool VoiceDHCP</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; network 172.19.10.0 255.255.255.0</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; default-router 172.19.10.1</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; dns-server 208.67.220.220 8.8.8.8</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; option 66 ascii 172.19.10.2</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; lease 2</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip cef</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW cuseeme</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW dns</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW ftp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW h323</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW https</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW icmp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW imap</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW pop3</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW netshow</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW rcmd</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW realaudio</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW rtsp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW esmtp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW sqlnet</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW streamworks</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW tftp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW tcp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW udp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect name SDM_LOW vdolive</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">no ip domain lookup</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip domain name domain.local</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">multilink bundle-name authenticated</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">key chain key1</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">key 1</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; key-string 7 06040033484B1B484557</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">crypto pki trustpoint TP-self-signed-3448656681</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">enrollment selfsigned</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">subject-name cn=IOS-Self-Signed-Certificate-3448bb6681</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">revocation-check none</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">rsakeypair TP-self-signed-344bbb56681</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">crypto pki certificate chain TP-self-signed-3448656681</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">certificate self-signed 01</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp; 3082024F</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; quit</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">username admin privilege 15 password 7 F55</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">archive</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">log config</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp; hidekeys</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">crypto isakmp policy 10</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">encr 3des</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">hash md5</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">authentication pre-share</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">group 2</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">crypto isakmp key XXXXX address 209.118.0.1</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">crypto isakmp key xxxxx address SITE B Public IP</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">crypto isakmp keepalive 40 5</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">crypto isakmp nat keepalive 20</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">crypto isakmp client configuration group IISVPN</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">key 1nsur3m3</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">dns 172.19.3.140</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">wins 172.19.3.140</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">domain domain.local</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">pool VPN_Pool</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">acl 198</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">crypto isakmp profile IISVPNClient</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; description VPN clients profile</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; match identity group IISVPN</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; client authentication list userauthen</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; isakmp authorization list groupauthor</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp; client configuration address respond</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">crypto ipsec transform-set myset esp-3des esp-md5-hmac</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">crypto dynamic-map Dynamic 5</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">set transform-set myset</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">set isakmp-profile IISVPNClient</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">qos pre-classify</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">crypto map VPN 10 ipsec-isakmp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">set peer 209.118.0.1</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">set peer SITE B Public IP</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">set transform-set myset</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">match address 101</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">qos pre-classify</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">crypto map VPN 65535 ipsec-isakmp dynamic Dynamic</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">track 123 ip sla 1 reachability</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">delay down 15 up 10</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">class-map match-any VoiceTraffic</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">match protocol rtp audio</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">match protocol h323</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">match protocol rtcp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">match access-group name VOIP</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">match protocol sip</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">class-map match-any RDP</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">match access-group 199</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">policy-map QOS</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">class VoiceTraffic</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp;&nbsp; bandwidth 512</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">class RDP</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp;&nbsp; bandwidth 768</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">policy-map MainQOS</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">class class-default</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp;&nbsp;&nbsp; shape average 1500000</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">&nbsp; service-policy QOS</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">interface FastEthernet0/0</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0$$FW_INSIDE$</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip address 172.19.3.129 255.255.255.128</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip access-group 100 in</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect SDM_LOW in</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip nat inside</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip virtual-reassembly</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">duplex auto</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">speed auto</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">interface FastEthernet0/0.10</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">description $ETH-VoiceVLAN$$</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">encapsulation dot1Q 10</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip address 172.19.10.1 255.255.255.0</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect SDM_LOW in</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip nat inside</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip virtual-reassembly</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">interface FastEthernet0/1</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">description "Comcast"</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip address PUB IP 255.255.255.248</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip access-group 102 in</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect SDM_LOW out</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip nat outside</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip virtual-reassembly</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">duplex auto</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">speed auto</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">crypto map VPN</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">interface Serial0/1/0</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">description "Verizon LEC Circuit ID: w0w13908 Site ID: U276420-1"</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">bandwidth 1536</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">no ip address</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">encapsulation frame-relay IETF</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">frame-relay lmi-type ansi</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">interface Serial0/1/0.1 point-to-point</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">bandwidth 1536</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip address 152.000.000.18 255.255.255.252</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip access-group 102 in</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip verify unicast reverse-path</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect SDM_LOW out</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip nat outside</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip virtual-reassembly</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">frame-relay interface-dlci 500 IETF </SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">crypto map VPN</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">service-policy output MainQOS</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">interface Serial0/2/0</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">description "PAETEC 46.HCGS.788446.CV (Verizon ID) / 46.HCGS.3 (PAETEC ID)"</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip address 123.252.123.102 255.255.255.252</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip access-group 102 in</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip inspect SDM_LOW out</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip nat outside</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip virtual-reassembly</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">encapsulation ppp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">crypto map VPN</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">service-policy output MainQOS</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip local pool VPN_Pool 172.20.3.130 172.20.3.254</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip forward-protocol nd</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip route 0.0.0.0 0.0.0.0 50.00.000.110 track 123</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip route 0.0.0.0 0.0.0.0 111.252.237.000 254</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip route 122.112.197.20 255.255.255.255 209.252.237.101</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip route 208.67.220.220 255.255.255.255 50.78.233.110</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">no ip http server</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">no ip http secure-server</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip http timeout-policy idle 60 life 86400 requests 10000</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip flow-top-talkers</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">top 20</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">sort-by bytes</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip nat inside source route-map COMCAST interface FastEthernet0/1 overload</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip nat inside source route-map PAETEC interface Serial0/2/0 overload</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip nat inside source route-map VERIZON interface Serial0/1/0.1 overload</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip nat inside source static tcp 172.19.3.140 21 PUB IP 21 extendable</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip access-list extended VOIP</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">permit ip 172.20.3.0 0.0.0.127 host 172.19.3.190</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">permit ip host 172.19.3.190 172.20.3.0 0.0.0.127</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip radius source-interface FastEthernet0/0</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip sla 1</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">icmp-echo 000.67.220.220 source-interface FastEthernet0/1</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">timeout 10000</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">frequency 15</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ip sla schedule 1 life forever start-time now</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 23 permit 172.19.3.0 0.0.0.127</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 23 permit 172.19.3.128 0.0.0.127</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 23 permit 173.189.251.192 0.0.0.63</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 23 permit 107.0.197.0 0.0.0.63</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 23 permit 173.163.157.32 0.0.0.15</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 23 permit 72.55.33.0 0.0.0.255</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 23 permit 172.19.5.0 0.0.0.63</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 100 remark "Outgoing Traffic"</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 100 deny&nbsp;&nbsp; ip 67.128.87.156 0.0.0.3 any</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 100 deny&nbsp;&nbsp; ip host 255.255.255.255 any</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 100 deny&nbsp;&nbsp; ip 127.0.0.0 0.255.255.255 any</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 100 permit tcp host 172.19.3.190 any eq smtp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 100 permit tcp host 172.19.3.137 any eq smtp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 100 permit tcp any host 66.251.35.131 eq smtp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 100 permit tcp any host 173.201.193.101 eq smtp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 100 permit ip any any</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 100 permit tcp any any eq ftp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 101 remark "Interesting VPN Traffic"</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 101 permit ip 172.19.3.128 0.0.0.127 172.19.3.0 0.0.0.127</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 101 permit ip 172.20.3.128 0.0.0.127 172.19.3.0 0.0.0.127</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 101 permit ip 172.19.3.128 0.0.0.127 host 172.19.250.10</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 101 permit ip 172.19.3.128 0.0.0.127 host 172.19.250.11</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 101 permit tcp any any eq ftp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 101 permit tcp any any eq ftp-data</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 remark "Inbound Access"</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit udp any host 152.179.53.18 eq non500-isakmp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit udp any host 152.179.53.18 eq isakmp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit esp any host 152.179.53.18</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit ahp any host 152.179.53.18</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit udp any host 209.000.000.102 eq non500-isakmp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit udp any host 209.000.000.102 eq isakmp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit esp any host 209.000.000.102</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit ahp any host 209.000.000.102</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit udp any host PUB IP eq non500-isakmp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit udp any host PUB IP eq isakmp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit esp any host PUB IP</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit ahp any host PUB IP</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit ip 72.55.33.0 0.0.0.255 any</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit ip 107.0.197.0 0.0.0.63 any</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 deny&nbsp;&nbsp; ip 172.19.3.128 0.0.0.127 any</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit icmp any any echo-reply</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit icmp any any time-exceeded</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit icmp any any unreachable</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit icmp any any</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 deny&nbsp;&nbsp; ip any any log</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit tcp any host 172.19.3.140 eq ftp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit tcp any host 172.19.3.140 eq ftp-data established</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit udp any host SITE B Public IP&nbsp; eq non500-isakmp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit udp any host SITE B Public IP&nbsp; eq isakmp</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit esp any host SITE B Public IP</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 102 permit ahp any host SITE B Public IP</SPAN></P><P style="padding: 0pt; margin: 0pt;"><SPAN style="border-collapse: separate; font-family: arial, helvetica, sans-serif; ">access-list&nbsp;&nbsp;&nbsp; 102&nbsp; permit tcp any host public ip eq 8443</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 110 remark "Outbound NAT Rule"</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 110 remark "Deny VPN Traffic NAT"</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 110 deny&nbsp;&nbsp; ip 172.19.3.128 0.0.0.127 172.19.3.0 0.0.0.127</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 110 deny&nbsp;&nbsp; ip 172.19.3.128 0.0.0.127 172.19.10.0 0.0.0.255</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 110 deny&nbsp;&nbsp; ip 172.19.10.0 0.0.0.255 172.19.3.128 0.0.0.127</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 110 deny&nbsp;&nbsp; ip 172.20.3.128 0.0.0.127 172.19.3.0 0.0.0.127</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 110 deny&nbsp;&nbsp; ip 172.19.3.128 0.0.0.127 172.20.3.128 0.0.0.127</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 110 deny&nbsp;&nbsp; ip 172.19.3.128 0.0.0.127 host 172.19.250.11</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 110 deny&nbsp;&nbsp; ip 172.19.3.128 0.0.0.127 host 172.19.250.10</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 110 permit ip 172.19.3.128 0.0.0.127 any</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 110 permit ip 172.19.10.0 0.0.0.255 any</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 198 remark "Networks for IISVPN Client"</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 198 permit ip 172.19.3.0 0.0.0.127 172.20.3.128 0.0.0.127</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 198 permit ip 172.19.3.128 0.0.0.127 172.20.3.128 0.0.0.127</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-list 199 permit tcp any any eq 3389</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">route-map PAETEC permit 10</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">match ip address 110</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">match interface Serial0/2/0</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">route-map COMCAST permit 10</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">match ip address 110</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">match interface FastEthernet0/1</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">route-map VERIZON permit 10</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">match ip address 110</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">match interface Serial0/1/0.1</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">snmp-server community 123 RO</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">radius-server host 172.19.3.7 auth-port 1645 acct-port 1646 key 7 000000000000000</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">control-plane</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">line con 0</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">line aux 0</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">line vty 0 4</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-class 23 in</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">privilege level 15</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">transport input telnet ssh</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">line vty 5 15</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">access-class 23 in</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">privilege level 15</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">transport input telnet ssh</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">!</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">scheduler allocate 20000 1000</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ntp server 128.118.25.3</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">ntp server 217.150.242.8</SPAN></P><P style="border-collapse: collapse; list-style-type: none;"><SPAN style="font-family: verdana, geneva;">end</SPAN></P><P></P><P><SPAN style="white-space: pre; font-family: verdana, geneva;"><BR /></SPAN></P> Tue, 12 Mar 2019 00:37:37 GMT https://community.cisco.com/t5/network-security/need-help-setting-up-static-nat-to-internal-server/m-p/2115434#M394073 joescott4t 2019-03-12T00:37:37Z Need help setting up static NAT to internal server https://community.cisco.com/t5/network-security/need-help-setting-up-static-nat-to-internal-server/m-p/2115435#M394074 <HTML><HEAD></HEAD><BODY><P>Can you pls advise what exactly you have configured? as what you have posted as the command doesn't match your configuration.</P><P>There is no ACL 150, and there is no ip range of 192.168.5.x.</P></BODY></HTML> Mon, 17 Dec 2012 05:19:26 GMT https://community.cisco.com/t5/network-security/need-help-setting-up-static-nat-to-internal-server/m-p/2115435#M394074 Jennifer Halim 2012-12-17T05:19:26Z Re: Need help setting up static NAT to internal server https://community.cisco.com/t5/network-security/need-help-setting-up-static-nat-to-internal-server/m-p/2115436#M394075 <HTML><HEAD></HEAD><BODY><P>I apologize, I placed the wrong ip address in the command it should read 172.19.3.133. All i want to to is NAT that public ip address to my private ip address.</P></BODY></HTML> Mon, 17 Dec 2012 06:01:21 GMT https://community.cisco.com/t5/network-security/need-help-setting-up-static-nat-to-internal-server/m-p/2115436#M394075 joescott4t 2012-12-17T06:01:21Z Need help setting up static NAT to internal server https://community.cisco.com/t5/network-security/need-help-setting-up-static-nat-to-internal-server/m-p/2115437#M394076 <HTML><HEAD></HEAD><BODY><P>Are you using a spare ip or it is the interface IP? Also are you trying to configure static NAT or static PAT?</P><P>I can see that you have 2 outside interfaces, what public IP are you trying to use?</P></BODY></HTML> Mon, 17 Dec 2012 08:02:41 GMT https://community.cisco.com/t5/network-security/need-help-setting-up-static-nat-to-internal-server/m-p/2115437#M394076 Jennifer Halim 2012-12-17T08:02:41Z Need help setting up static NAT to internal server https://community.cisco.com/t5/network-security/need-help-setting-up-static-nat-to-internal-server/m-p/2115438#M394078 <HTML><HEAD></HEAD><BODY><P>I am planning on using the public ip address on </P><P style="border-collapse: collapse; list-style-type: none;">interface FastEthernet0/1</P><P style="border-collapse: collapse; list-style-type: none;">description "Comcast"</P></BODY></HTML> Mon, 17 Dec 2012 11:37:12 GMT https://community.cisco.com/t5/network-security/need-help-setting-up-static-nat-to-internal-server/m-p/2115438#M394078 joescott4t 2012-12-17T11:37:12Z Need help setting up static NAT to internal server https://community.cisco.com/t5/network-security/need-help-setting-up-static-nat-to-internal-server/m-p/2115439#M394082 <HTML><HEAD></HEAD><BODY><P>If you are planning to use the fa0/1 interface IP itself then the configuration would be:</P><P></P><P>ip nat inside source static tcp 172.19.3.133 8443 interface fa0/1 8443 extendable</P><P></P><P>Assuming that you would like to port forward TCP/8443.</P><P></P><P>Then the ACL should be written:</P><P>ip access-list extended 102</P><P>&nbsp; 2 permit tcp any host <PUBLIC-IP-OF-FA0> eq 8443</PUBLIC-IP-OF-FA0></P></BODY></HTML> Tue, 18 Dec 2012 05:09:18 GMT https://community.cisco.com/t5/network-security/need-help-setting-up-static-nat-to-internal-server/m-p/2115439#M394082 Jennifer Halim 2012-12-18T05:09:18Z