Hi,
I am using a Cisco 2600 for a point to point T1 to a remote site as well as Internet access for both sites.
I have one CSU/DSU WIC card for the point to point T1.
The LAN is connected to FastEthernet0/0.
The Internet is accessed through FastEthernet0/1.
The router between the 2600 and the T1 is not running any type of firewall or blocking anything.
The router is a 2621XM running c2600-i-mz.123-3a.bin.
I am having trouble getting NAT to work for Internet access from both the main and remote sites.
A traceroute from a system on the LAN shows the FastEthernet0/1 ip address but stops there.
Here is the config info.
version 12.3
!
no cdp enable
!
interface FastEthernet0/0
description Main site LAN
ip address 192.168.1.253 255.255.255.0
ip access-group 101 in
ip nat inside
no ip mroute-cache
speed auto
full-duplex
!
interface Serial0/0
descrition Point to Point T1 to remote site
ip address 172.22.130.2 255.255.255.0
no ip mroute-cache
compress stac
no fair-queue
!
interface FastEthernet0/1
description Access to Internet.
ip address 66.213.222.194 255.255.255.248
ip access-group 105 in
ip nat outside
no ip mroute-cache
duplex auto
speed auto
!
ip default-gateway 66.213.222.193
ip nat inside source route-map nonat interface FastEthernet0/1 overload
ip route 0.0.0.0 0.0.0.0 66.213.222.193
ip route 192.168.2.0 255.255.255.0 172.22.130.1
!
!
access-list 101 permit ip any any
access-list 105 deny tcp any eq 135 any
access-list 105 permit tcp any host 66.213.222.194 eq telnet
access-list 105 permit udp any host 66.213.222.194 eq isakmp
access-list 105 permit ahp any host 66.213.222.194
access-list 105 permit esp any host 66.213.222.194
access-list 105 permit gre any host 66.213.222.194
access-list 105 permit ip host 63.228.0.81 any
access-list 105 permit ip 192.168.2.0 0.0.0.255 any
access-list 105 permit ip 192.168.240.0 0.0.0.3 any
access-list 105 permit tcp any host 66.213.222.194 eq smtp
access-list 105 permit tcp any host 66.213.222.194 eq www
access-list 105 permit tcp any host 66.213.222.194 eq pop3
access-list 105 permit tcp any host 66.213.222.194 eq 1723
access-list 105 permit tcp any host 66.213.222.194 eq 443
access-list 105 permit tcp any host 66.213.222.194 eq 5900
access-list 105 permit tcp any host 66.213.222.194 eq 11110
access-list 105 permit icmp any host 66.213.222.194 administratively-prohibited
access-list 105 permit icmp any host 66.213.222.194 echo
access-list 105 permit icmp any host 66.213.222.194 echo-reply
access-list 105 permit icmp any host 66.213.222.194 packet-too-big
access-list 105 permit icmp any host 66.213.222.194 time-exceeded
access-list 105 permit icmp any host 66.213.222.194 unreachable
access-list 105 deny ip any any
access-list 110 permit ip 192.168.2.0 0.0.0.255 any
access-list 110 permit ip 192.168.1.0 0.0.0.255 any
access-list 115 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 115 permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255
no cdp run
route-map nonat permit 10
match ip address 110
!
Thanks much in advance for any assistance!
Kevin Wurzer
email:kwurzer@rheummds.com
