Hi,
I'm pretty new to business-level routers (I have programming and certain Ubuntu system admin experience though) but I'm facing a problem with Cisco 4431 router.
We have a client with quite strict security policy. The router resides in client's network, with external IP (12.34.56.78) assigned by client's network. The router manages a few Ubuntu servers (X, Y, Z, etc).
From my computer at my home, I can log into client's VPN and then access the router with ssh command, like
>ssh admin@12.34.56.78
or access server X with command like
>ssh -p 2210 guest@12.34.56.78
When I ssh into X, I issue command
>wget https://www.gnu.org/software/wget # I have wget installed actually, just to test internet connection
I got error like
>wget: unable to resolve host address: 'ftp.gnu.org'
I think I've set the networking files like "interfaces" correctly on server X and believe it's the client's firewall setting. However, the client's IT department says they don't block anything.
To avoid the possibility that I didn't configure X correctly, I also ssh into the router, and I issue command
#show ip nat trans
Pro Inside global Inside local Outside local Outside global
icmp 172.24.62.135:1 192.168.2.10:15172 8.8.8.8:15172 8.8.8.8:1
.......
tcp 172.24.62.135:2210 192.168.2.10:22 10.132.63.11:43853 10.132.63.11:43853
udp 172.24.62.135:1064 192.168.2.11:21803 129.176.199.5:53 129.176.199.5:53
Total number of translations: 114
I think this says the router is able to sending out outbound requests. However I wonder if there's any command that can show the router is sending outbound to www.gnu.org or www.google.com, but is blocked by the network. An imagined command like this:
#send_outbound_request_to_google
sending request out; sent; returned message saying you are blocked
I don't know much about router commands. Can you please help? TIA
-tx
