Cisco 950. Where is my problem ?

[jquintard]

Hello,

I have configure a 950 router with NAT to translate a public IP to a private IP and two ACL to this private IP to open two TCP ports (HTTP/80 and SMTP/25) and permit incoming data.

That work perfectly but oddly, some peoples (I dont understand why and I have the same problem with my personnal connection) can't reach my machine and use this two services.

Do you have an idea ???

Jérôme

[ankurbhasin]

Hi Jerome,

Hvw you configured NAT or NAT Overload. I think you have to configure NAT overload for this purpose.

Can you post your config for NAT and access list.

Regards,

Ankur

[jquintard]

Hi Ankur,

NAT overload ? What is this ?

My configuration is in attachment.

Thanks for your help !

Jérôme

[jquintard]

Nobody have an idea ? I always can't use my router without this problem.

Jérôme

[spremkumar]

Hi

From your configs its clear that you have deployed both PAT(overloading) and STATI NAT for a single ip..

But do revert whats this ip 213.41.129.69 ?? is this the same ip which u get everytime on ur dialer ?

also revert about ip assignment to ur dialer is it gonna be on from a pool or you will be getting some particular static ip always ?

if yes then is there any binding configured between the dialer ip and 213.41.129.69 ?

or any radius attribute being configured or attached to your user id so that once you get an ip with ur uid u will get a static route installed for 213.41.129.69 pointing the ip recd in ur dialer interface..

regds

[jquintard]

> But do revert whats this ip 213.41.129.69 ??

> is this the same ip which u get everytime

> on ur dialer ?

Yes ! My ISP give me this static public IP

My configuration is like this :

Wan

|

Router

|

------------

| |

Server1 Serverx

Routeur (public: 213.41.129.69, private: 10.10.10.10)

Server1 (private: 192.168.1.13)

I want to redirect public request (213.41.129.69) on port 80 to the private ip of server1 (192.168.1.13).

What is the best solution ?

Jérôme

[spremkumar]

Hi

ideally the static port translation should be like this ..

ip nat inside source static tcp 10.10.10.13 80 213.41.129.69 80

but here ur saying about 192.168.1.13 ip which is no where mentioned or configured in the router.

and in the sample fig u didnt mention the existence of any PIX F/W too.

Do revert whether it was an typo error or whether you got ur server in 192.168.1.x subnet..

if thats the case u need to configure that particular subnet again in the ethernet port as a secondary ip address.

then try out the same command which i have mentioned above after alterint 10.x.x.x ip with 192.168.1.13..

regds

[jquintard]

Sorry It's a mistake, It's 10.10.10.13.

I have no pix in this configuration.

Just the router and 3 servers behind.

I want just to translate port (http, smtp) from the public ip (213.41.129.69 in this sample) to a private ip (10.10.10.13 in this case).

Thanks !

Jérôme