cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1069
Views
0
Helpful
5
Replies

Trying to SSH into a server behind a Cisco router

lennys1972
Level 1
Level 1

I have a small Supermicro server behind a Cisco 2811 router. I am able to SSH into the router but I cannot reach the server, which has a 192.168 IP address. Can someone please look at my config and give me a hint on what is missing?

Current configuration : 1719 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname MY_router
!
boot-start-marker
boot-end-marker
!
! card type command needed for slot/vwic-slot 0/0
logging message-counter syslog
enable secret 5 dserfgergfeswrgert345t34356345
!
no aaa new-model
!
dot11 syslog
ip source-route
!
!
ip cef
!
!
!
no ipv6 cef
multilink bundle-name authenticated
!
!         
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
 no dspfarm
!
!
!
!
!
username lennys secret 5 sdfgsdfgwseertfgwertg3546435
archive
 log config
  hidekeys
! 
!         
!
!
!
ip ssh version 2
!
!
!
!
interface FastEthernet0/0
 description TO_INTERNET
 ip address 45.x.x.x 255.255.255.252
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface FastEthernet0/1
 description TO_LAN
 ip address 45.x.x.x 255.255.255.252
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
router ospf 10
 log-adjacency-changes
 network 45.x.x.x 0.0.0.7 area 0
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 45.x.x.x
no ip http server
no ip http secure-server
!
!
ip nat inside source static tcp 192.168.1.10 22 45.x.x.x 22 extendable
ip nat inside source static tcp 192.168.1.10 80 45.x.x.x 80 extendable
ip nat inside source static tcp 192.168.1.10 443 45.x.x.x 443 extendable
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 100 permit tcp host 45.x.x.x host 192.168.1.10 eq 22
!
!
!
!
!
!
!
control-plane
!
!
!
voice-port 0/1/0
!
voice-port 0/1/1
!
voice-port 0/1/2
!
voice-port 0/1/3
!
!         
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
 access-class 100 in
 login local
 transport input ssh
!
scheduler allocate 20000 1000
end
1 Accepted Solution

Accepted Solutions

192.168.1.0<<- it must be this subnet since it IP NAT inside.

View solution in original post

5 Replies 5

ip nat inside source static tcp 192.168.1.10 22 45.x.x.x 22 extendable
ip nat inside source static tcp 192.168.1.10 80 45.x.x.x 80 extendable
ip nat inside source static tcp 192.168.1.10 443 45.x.x.x 443 extendable

 

interface FastEthernet0/1
 description TO_LAN
 ip address 45.x.x.x 255.255.255.252<<-- IP is wrong 
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto

Sorry, I don't follow. What's wrong about the IP? I placed the x's there to obfuscate the real IP address, they're just a placeholder.

192.168.1.0<<- it must be this subnet since it IP NAT inside.

marce1000
Hall of Fame
Hall of Fame

 

                 - What error do you get when trying the ssh-connection ?

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

I don't see an error per se, the connection just times out.