Hi all, I have an 1841 for a test environment and I've been trying to get port translation to work and I just can't get it to work. I can get to the router via Telnet or SSh no problem, but nothing internal. My scrubbed config is below, thanks in advance for any help
=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2013.10.21 12:27:30 =~=~=~=~=~=~=~=~=~=~=~=
show run
Building configuration...
Current configuration : 4858 bytes
!
! Last configuration change at 11:23:40 EDT Mon Oct 21 2013 by admin
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname SandboxRT1
!
boot-start-marker
boot system flash:c1841-adventerprisek9-mz.151-4.M1.bin
boot-end-marker
!
!
logging buffered 50000
logging console informational
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication enable default none
!
!
!
!
!
aaa session-id common
!
clock timezone EST -5 0
clock summer-time EDT recurring
dot11 syslog
ip source-route
!
!
!
!
!
ip cef
no ip domain lookup
ip domain name entsand.local
ip name-server 4.2.2.2
ip name-server 8.8.8.8
ip inspect name Firewall tcp router-traffic
ip inspect name Firewall udp router-traffic
ip inspect name Firewall icmp router-traffic
login block-for 600 attempts 10 within 5
login delay 5
login on-failure log
login on-success log
no ipv6 cef
!
multilink bundle-name authenticated
!
crypto pki token default removal timeout 0
!
!
!
!
license udi pid CISCO1841 sn FTX1228Y0YA
archive
log config
logging enable
hidekeys
username admin privilege 15 secret 5 $1$zJUp$cENJm525gTb0kxTu6kDMs.
!
redundancy
!
!
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh version 2
!
!
!
!
!
!
!
interface FastEthernet0/0
description To Internet
ip address x.x.x.x x.x.x.x
ip access-group fwall in
ip nat outside
ip inspect Firewall out
ip virtual-reassembly in
speed 100
full-duplex
!
interface FastEthernet0/1
description To LAN
ip address 172.16.1.2 255.255.255.0
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat inside source list NAT-LIST interface FastEthernet0/0 overload
ip nat inside source static tcp 172.16.1.51 443 interface FastEthernet0/0 443
ip route 0.0.0.0 0.0.0.0 x.x.x.x
ip route 172.16.1.0 255.255.255.0 172.16.1.1
!
ip access-list standard ACL_VTY-In
permit x.x.x.x
!
ip access-list extended NAT-LIST
permit ip 172.16.1.0 0.0.0.255 any
ip access-list extended fwall
permit gre any any
permit tcp any any eq telnet
permit tcp any any eq 22
permit udp any any eq isakmp
permit esp any any
--More-- permit tcp any any eq 443
!
logging trap debugging
access-list 1 permit 172.16.1.0 0.0.0.255
!
!
!
!
!
!
!
!
control-plane
!
!
banner exec ^C
!
line con 0
privilege level 15
logging synchronous
line aux 0
line vty 0 4
access-class ACL_VTY-In in
privilege level 15
logging synchronous
transport input telnet
line vty 5 15
access-class ACL_VTY-In in
privilege level 15
logging synchronous
transport input ssh
!
scheduler allocate 20000 1000
end
