PROBLEM WITH LOCAL HTTP SERVER

[manstrik059]

My local server does not work (I cannot go to the web page of this server from the 33.33.33.0 network), although I can from the 192 168.1.0 network, but there I use a gre tunnel, maybe problem in nat, in the middle I use ospf and announce other networks in ospf. Please help me

[Flavio Miranda]

@manstrik059 

 You have the same problem as @andrew005 . Check his post "https://community.cisco.com/t5/discusiones-routing-y-switching/problem-with-lan-http-server/m-p/5223914#M11217 

I just fixed his problem, you can take the solution from there.

[manstrik059]

i check his post but ur solving don't help

[Flavio Miranda]

Ok, let me see you file

[manstrik059]

thank you i am waiting

[manstrik059]

haven't you forgotten about me?

[Flavio Miranda]

No...your problem was related to NAT. I fixed it by adding one line on the ACL. Check this out

[manstrik059]

can you tell me what you changed?

[Flavio Miranda]

I added the following line on R9

ip access-list extended PUBLIC-ACCESS

permit ip 33.33.33.0 0.0.0.255 host 192.168.0.10

deny ip 33.33.33.0 0.0.0.255 192.168.0.0 0.0.0.255

deny ip 192.168.0.0 0.0.0.255 33.33.33.0 0.0.0.255

permit ip any any

!

End this on Router 7

router ospf 1

router-id 7.7.7.7

log-adjacency-changes

redistribute static subnets

redistribute connected subnets

passive-interface GigabitEthernet1/0

network 17.12.18.72 0.0.0.3 area 0

!

[manstrik059]

but your photo is not my project and it still doesn't work for me

[Flavio Miranda]

Oh sorry LOL..mixed up the projects. Just a second

[Flavio Miranda]

Because you have a Static NAT, you need to call the Router IP address, not the server IP address

!

ip nat inside source list FOR-NAT interface GigabitEthernet0/0 overload

ip nat inside source list PUBLIC-ACCESS interface GigabitEthernet0/0 overload

ip nat inside source static tcp 192.168.0.10 80 10.10.10.5 80

ip classless

If you call the server on port 443, you can call the server directly. Because there will be no NAT on port 443

[manstrik059]

send me project pls

[Flavio Miranda · Accepted solution]

of course

[manstrik059]

Maybe you want to help me with a new problem in my profile?)