07-17-2022 09:03 AM - edited 07-17-2022 09:06 AM
I have a small Supermicro server behind a router, and while I can access the server from outside over ports 22, 80 and 443 I cannot ping out from the inside. Something is causing packets generated by my server to be dropped, and I need help figuring it out. Here's my router config, its a Cisco 2811. What am I missing?
Building configuration...
Current configuration : 1667 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname lennys-router
!
boot-start-marker
boot-end-marker
!
! card type command needed for slot/vwic-slot 0/0
logging message-counter syslog
enable secret 5 dflgjkdsfgnhkdsujrghwerkgfjwes
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
!
no ipv6 cef
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
no dspfarm
!
!
!
!
!
username lennys secret 5 sdfg,jsd,fgnskldjfgsdrgfilkj
archive
log config
hidekeys
!
!
!
!
!
ip ssh version 2
!
!
!
!
interface FastEthernet0/0
ip address 45.x.x.x 255.255.255.248
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
router ospf 10
log-adjacency-changes
network 45.x.x.x 0.0.0.7 area 0
default-information originate
!
router ospf 1
log-adjacency-changes
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 45.x.x.x
no ip http server
no ip http secure-server
!
!
ip nat inside source static tcp 192.168.1.10 22 45.x.x.x 22 extendable
ip nat inside source static tcp 192.168.1.10 80 45.x.x.x 80 extendable
ip nat inside source static tcp 192.168.1.10 443 45.x.x.x 443 extendable
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
!
!
!
!
!
!
control-plane
!
!
!
voice-port 0/1/0
!
voice-port 0/1/1
!
voice-port 0/1/2
!
voice-port 0/1/3
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
exec-timeout 0 0
login local
transport input ssh
!
scheduler allocate 20000 1000
end
Solved! Go to Solution.
07-17-2022 11:52 AM
YOU need
below command
ip nat inside source list 1 interface f0/0 overloal
07-17-2022 11:52 AM
YOU need
below command
ip nat inside source list 1 interface f0/0 overloal
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide