12-16-2013 10:20 AM - edited 03-07-2019 05:06 PM
Good day,
I have a Cisco 881 router on which I'm trying to set up some NAT to allow external connections on some alternate IPs from my ISP to connect to certain ports on my internal servers. Unfortunately, I'm not a network engineer and something seems to be not-quite-right with my configuration.
From my ISP I have the IP address 184.183.156.98, this is assigned to the WAN port (FastEthernet4) of my Cisco 881 router, and I have that working correctly. The Port-forwarding rules I have in place that use this IP work just fine. Additionally, I have the small block of IPs 184.183.150.161-164. None of the port forwarding rules set up for these seem to work at all.
If you need the complete config file, please let me know. This section below seems to me to be the relevant bits to my issue, the bolded entries are the port forwarding rules that I think should work, but which don't seem to.
!
interface FastEthernet4
description WAN$FW_OUTSIDE$
ip address 184.183.156.98 255.255.255.252
no ip redirects
no ip unreachables
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
!
ip nat inside source list 23 interface FastEthernet4 overload
ip nat inside source static tcp 192.168.10.205 1024 184.183.150.162 1024 extendable
ip nat inside source static tcp 192.168.10.205 1025 184.183.150.162 1025 extendable
ip nat inside source static tcp 192.168.10.205 1026 184.183.150.162 1026 extendable
ip nat inside source static tcp 192.168.10.205 1027 184.183.150.162 1027 extendable
ip nat inside source static tcp 192.168.10.205 3061 184.183.150.162 3061 extendable
ip nat inside source static tcp 192.168.10.205 3064 184.183.150.162 3064 extendable
ip nat inside source static tcp 192.168.10.210 888 184.183.150.163 888 extendable
ip nat inside source static tcp 192.168.10.93 1024 184.183.150.164 1024 extendable
ip nat inside source static tcp 192.168.10.93 1026 184.183.150.164 1026 extendable
ip nat inside source static tcp 192.168.10.93 1027 184.183.150.164 1027 extendable
ip nat inside source static tcp 192.168.10.93 3060 184.183.150.164 3060 extendable
ip nat inside source static tcp 192.168.10.93 6901 184.183.150.164 6901 extendable
ip nat inside source static udp 192.168.10.93 6901 184.183.150.164 6901 extendable
ip nat inside source static tcp 192.168.10.250 88 184.183.156.98 88 extendable
ip nat inside source static tcp 192.168.10.250 37777 184.183.156.98 37777 extendable
ip route 0.0.0.0 0.0.0.0 184.183.156.97
!
access-list 23 remark CCP_ACL Category=19
access-list 23 permit 192.168.10.0 0.0.0.255
access-list 23 permit 192.168.20.0 0.0.0.255
access-list 23 permit 192.168.30.0 0.0.0.255
access-list 23 permit 192.168.40.0 0.0.0.255
access-list 23 remark VPN Internet acccess
access-list 23 permit 192.168.50.0 0.0.0.255
Thank you,
Adam Corbett