07-08-2022 07:53 AM - edited 07-08-2022 07:54 AM
I have a small Supermicro server behind a Cisco 2811 router. I am able to SSH into the router but I cannot reach the server, which has a 192.168 IP address. Can someone please look at my config and give me a hint on what is missing?
Current configuration : 1719 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname MY_router ! boot-start-marker boot-end-marker ! ! card type command needed for slot/vwic-slot 0/0 logging message-counter syslog enable secret 5 dserfgergfeswrgert345t34356345 ! no aaa new-model ! dot11 syslog ip source-route ! ! ip cef ! ! ! no ipv6 cef multilink bundle-name authenticated ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! voice-card 0 no dspfarm ! ! ! ! ! username lennys secret 5 sdfgsdfgwseertfgwertg3546435 archive log config hidekeys ! ! ! ! ! ip ssh version 2 ! ! ! ! interface FastEthernet0/0 description TO_INTERNET ip address 45.x.x.x 255.255.255.252 ip nat outside ip virtual-reassembly duplex auto speed auto ! interface FastEthernet0/1 description TO_LAN ip address 45.x.x.x 255.255.255.252 ip nat inside ip virtual-reassembly duplex auto speed auto ! router ospf 10 log-adjacency-changes network 45.x.x.x 0.0.0.7 area 0 ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 45.x.x.x no ip http server no ip http secure-server ! ! ip nat inside source static tcp 192.168.1.10 22 45.x.x.x 22 extendable ip nat inside source static tcp 192.168.1.10 80 45.x.x.x 80 extendable ip nat inside source static tcp 192.168.1.10 443 45.x.x.x 443 extendable ! access-list 1 permit 192.168.1.0 0.0.0.255 access-list 100 permit tcp host 45.x.x.x host 192.168.1.10 eq 22 ! ! ! ! ! ! ! control-plane ! ! ! voice-port 0/1/0 ! voice-port 0/1/1 ! voice-port 0/1/2 ! voice-port 0/1/3 ! ! ! ! ! ! ! ! line con 0 line aux 0 line vty 0 4 access-class 100 in login local transport input ssh ! scheduler allocate 20000 1000 end
Solved! Go to Solution.
07-08-2022 10:35 AM
192.168.1.0<<- it must be this subnet since it IP NAT inside.
07-08-2022 08:16 AM
ip nat inside source static tcp 192.168.1.10 22 45.x.x.x 22 extendable ip nat inside source static tcp 192.168.1.10 80 45.x.x.x 80 extendable ip nat inside source static tcp 192.168.1.10 443 45.x.x.x 443 extendable
interface FastEthernet0/1 description TO_LAN ip address 45.x.x.x 255.255.255.252<<-- IP is wrong ip nat inside ip virtual-reassembly duplex auto speed auto
07-08-2022 10:21 AM
Sorry, I don't follow. What's wrong about the IP? I placed the x's there to obfuscate the real IP address, they're just a placeholder.
07-08-2022 10:35 AM
192.168.1.0<<- it must be this subnet since it IP NAT inside.
07-08-2022 09:59 AM
- What error do you get when trying the ssh-connection ?
M.
07-08-2022 10:21 AM
I don't see an error per se, the connection just times out.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide