Nat inside source static tcp extendable doesn't seem to work.

[huytuan]

I've got a computer with 3 network cards.

the ip address of the NICs are: 192.168.100.3, 192.168.100.7, 192.168.100.56 .

I need public users to access VPN via 192.168.100.3,

access Terminal services via 192.168.100.7,

Lotus Notes via 192.168.100.56.

So I configure my Ethernet1 as follows:

ip nat inside source list 20 interface Ethernet1 overload.

ip nat inside source static tcp 192.168.100.3 1723 203.145.145.145 1723 extendable

ip nat inside source static tcp 192.168.100.3 47 203.145.145.145 47 extendable

ip nat inside source static tcp 192.168.100.7 3389

203.145.145.145 3389 extendable

ip nat inside source static tcp 192.168.100.56 1352 203.145.145.145 1352 extendable

access-list 10 permit 192.168.100.3 0.0.0.1

access-list 10 permit 192.168.100.7 0.0.0.1

access-list 10 permit 192.168.100.56 0.0.0.1

But it doesn't work. What is the problem and how can it be fixed? Thanks.

[raymong]

Be sure that when you are testing your connections, you are testing them from outside your network. Also, your dynamic NAT ACL is misconfigured... either change your dynamic NAT to "ip nat inside source list 10" or change your ACL to 20.