cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
330
Views
0
Helpful
3
Replies

NAT Problem with 1841 IS

akalhan
Level 1
Level 1

I am setting 1841 at my site and have a NAT issue.

Basically I need i have a setup with 3 public IP's given by my ISP and am using 192.168.1.xxx as my private.

Public IP on FE0/0 and Private on FE0/1

I can go out to internet fine on one of the IP's however I need to setup a mail server on one of the private IP's and need as second public IP to be redirected to this private IP

I am using

ip nat inside source static 192.168.1.10 public-ip

i can ping the public IP from the internal interface however I cannot ping it from outside.

My undesrtanding is that the second public IP will come up automatically when I bring up the ip nat inside command.

any insite. I can send you my full config if you like

thanks,

AK

3 Replies 3

thisisshanky
Level 11
Level 11

If you just want to permit mail, you can simply do this,

ip nat inside source static tcp 192.168.1.10 25 pblic-ip 25

Do yo uhave any other ACLs in place on the fast E interfaces ? What is the subnet mask of the public IP given to you - /29 ? (255.255.255.248)

Sankar Nair
UC Solutions Architect
Pacific Northwest | CDW
CCIE Collaboration #17135 Emeritus

The netmask is 255.255.255.0

here are acl's in place

access-list 1 permit 192.168.1.0 0.0.0.255

access-list 2 permit 192.168.1.0 0.0.0.255

access-list 2 permit any

access-list 100 permit udp host 192.168.1.10 eq domain any

access-list 100 permit tcp 192.168.1.0 0.0.0.255 host 192.168.1.1 eq telnet

access-list 100 deny tcp any host 192.168.1.1 eq telnet

access-list 100 permit ip any any

access-list 101 permit ip 0.0.0.0 0.0.0.255 any

access-list 101 permit ip 192.168.1.0 0.0.0.255 any

access-list 102 permit ip 0.0.0.0 0.0.0.255 any

access-list 102 permit ip 192.168.1.0 0.0.0.255 any

access-list 103 permit tcp 0.0.0.0 0.0.0.255 host 216.240.xxx.xxx eq telnet

thanks

I would like to know how these access-lists are applied, which ones are applied on what interface. A show run of your router with ip addresses (public ips) and passwords masked would help.

Sankar Nair
UC Solutions Architect
Pacific Northwest | CDW
CCIE Collaboration #17135 Emeritus

Review Cisco Networking for a $25 gift card