Port forwarding in cisco isr4221

[wanumet]

Hello, I want to access a PaBx (172.16.0.86) so I tried to do port forwarding for it in Isr4221 but still can't reach it. 

When I do port check on the public ip, it still shows that the port(80) is closed.

What more should I do.

 

[Georg Pauwen]

Hello, 

does GigabitEthernet0/0/1 have an actual IP address ? If so, try and change the entry to:

ip nat inside source static tcp 172.16.0.86 80 x.x.x.x 80

[wanumet]

Hello @Georg Pauwen 

GigabitEthernet0/0/1 has a public ip.

I also tried using the public IP in place of the interface name but still was not successful. 

[Georg Pauwen]

Hello,

can you post the output of:

sh ip nat portblock dynamic global

show ip nat portblock pat global

[wanumet]

Here it is

YH-Cisco-Router#sh ip nat portblock dynamic global
tcp:
  5062 -6085   rfcnt 1 545  -617    rfcnt 1
udp:
  5062 -6085   rfcnt 1 585  -648    rfcnt 1 512  -584    rfcnt 1
YH-Cisco-Router#show ip nat portblock pat global
tcp:
  80     rfcnt 1
YH-Cisco-Router#

[wanumet]

I have also forwarded it on udp but still the same problem

YH-Cisco-Router#show ip nat portblock pat global
tcp:
  80     rfcnt 1
udp:
  80     rfcnt 1
YH-Cisco-Router#

[Georg Pauwen]

Hello,

try the below:

Delete both NAT entries:

no ip nat inside source static tcp 172.16.0.86 80 interface GigabitEthernet0/0/1 80
no ip nat inside source list 1 interface GigabitEthernet0/0/1 overload

Then clear the NAT translations:

clear ip nat translation *

Then re-add the NAT entries (static first):

ip nat inside source static tcp 172.16.0.86 80 interface GigabitEthernet0/0/1 80
ip nat inside source list 1 interface GigabitEthernet0/0/1 overload

[wanumet]

@Georg Pauwen 

not successful yet

YH-Cisco-Router#sh ip nat translation
Pro  Inside global         Inside local          Outside local         Outside global
tcp  X.X.X.X:443    172.16.0.254:443      ---                   ---
udp  X.X.X.X:80     172.16.0.254:80       ---                   ---
tcp  X.X.X.X:80     172.16.0.254:80       ---                   ---
udp  X.X.X.X:539    172.16.0.11:123       132.163.97.4:123      132.163.97.4:123
tcp  X.X.X.X:5309   172.16.0.56:35118     216.58.223.86:443     216.58.223.86:443
tcp  X.X.X.X:5366   172.16.0.56:43326     172.217.170.206:443   172.217.170.206:443
udp  X.X.X.X:517    172.16.0.13:123       132.163.97.1:123      132.163.97.1:123
  

I did what you said and still not successfull.

172.16.0.254 is a PaBx whic I want to access and connect telephones from another branch

X.X.X.X is the public IP of the cisco ISR4221

The hhtp port of the PaBx is 80

https port of the PaBX is 443