08-28-2006 02:51 AM - edited 03-03-2019 01:47 PM
Hi All
can anyone see something wrong in my config. I cant seem to get my web services on port 80 or 443 working externally.
heres the config:
hostname Iroute
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
no ip domain-lookup
ip name-server x.x.254.240
ip name-server x.x.254.241
!
!
bridge irb
!
!
interface Ethernet0
ip address 192.168.1.1 255.255.255.0
ip nat inside
no keepalive
hold-queue 100 out
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5snap
!
bundle-enable
dsl operating-mode auto
bridge-group 1
hold-queue 224 in
!
interface BVI1
ip address x.x.x.114 255.255.255.252
ip access-group 101 in
ip nat outside
!
ip nat inside source list 1 interface BVI1 overload
ip nat inside source static tcp 192.168.1.100 80 x.x.x.114 80 extendable
ip nat inside source static tcp 192.168.1.100 443 x.x.x.114 443 extendable
ip classless
ip route 0.0.0.0 0.0.0.0 x.x.x.113
no ip http server
!
!
logging 192.168.1.100
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 101 deny tcp any host x.x.x.114 eq telnet
access-list 101 deny icmp any host x.x.x.114 echo
access-list 101 permit ip any any
bridge 1 protocol ieee
bridge 1 route ip
!
line con 0
exec-timeout 120 0
logging synchronous
login local
stopbits 1
line vty 0 4
exec-timeout 120 0
login local
!
scheduler max-task-time 5000
end
08-28-2006 03:18 AM
Hi,
AFAIK the config looks ok.
Check if the access is blocked by the ISP.
Some DSL providers do block inbound connections on standard ports to the subscriber IP Addressses from the internet.
To verify this, You can turn on nat debug and see if the http/https packets hits your router from the internet and check with the ISP.
-VJ
08-28-2006 03:33 AM
Hi VJ
yes it has really got me as the config looks fine. But I dont think my isp has blocked inbound access as I had it running a few days ago. It is very strange but sometimes it works for a short period of time after a reload but then loses connectivity.
I will try the debug nat and see if it hits the router.
thanks for your helkp VJ
Dom
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide