02-26-2020 05:00 AM - edited 02-26-2020 05:07 AM
when I connect the isr 1100 to navigate into the published services alocate in the web server of my company, I get this, "error 403 forbidden", if I connect the cisco rv042g I have no problem entering into the same page.
02-26-2020 05:56 AM
https://en.wikipedia.org/wiki/HTTP_403
M.
02-26-2020 06:11 AM
Hello,
is this outside to inside access with NAT involved ? Post the running config of your ISR...
02-26-2020 07:00 AM - edited 02-26-2020 07:04 AM
external connection to the web server is functional with forwarding ip nat inside source static tcp 192.168.X.X8085 190.85.51.X.X 80 but internally (locally) generates error 403
![cisco.png cisco.png](https://community.cisco.com/t5/image/serverpage/image-id/68023iE15DB7EC55B4BF96/image-size/large?v=v2&px=999)
02-26-2020 12:21 PM
Hello,
which browser are you using ? Make sure the problem is not on the client/browser side, try and clear the browser cache and cookies...
03-13-2020 11:04 AM
02-29-2020 05:02 AM
02-29-2020 05:04 AM
02-29-2020 06:03 AM
Hello
How are your ppoe clients obtaining dns?
Try pointing your clients to use that rtr for the dns
rtr
int virtual-template 1
ppp ipcp dns request accept
exit
ip dns server (your router)
03-02-2020 11:33 AM
good afternoon paul sent the respective configuration but still the same inconvenience
virtual-template 1
!
!
!
!
!
interface GigabitEthernet0/0/0
description WAN
ip address x.x.x.x x.x.x.x.
ip nat outside
negotiation auto
crypto map CMAP
!
interface GigabitEthernet0/0/1
description LAN
ip address x.x.x.x x.x.x.x
ip nat inside
negotiation auto
!
interface Virtual-Template1
ip unnumbered GigabitEthernet0/0/0
peer default ip address pool l2tp-pool
ppp authentication ms-chap-v2
ppp ipcp dns request accept
!
interface Vlan1
no ip address
!
ip local pool l2tp-pool x.x.x.x. x.x.x.x.
ip nat inside source static tcp x.x.x.x. x.x.x.x.x extendable
ip nat inside source list 113 interface GigabitEthernet0/0/0 overload
ip forward-protocol nd
ip http server
ip http port 80
ip http authentication local
ip http secure-server
ip dns server
ip route 0.0.0.0 0.0.0.0 x.x.x.x
ip ssh time-out 30
ip ssh version 2
!
!
ip access-list extended BN
permit ip 1 x.x.x.x x.x.x.x. x.x.x.x
!
access-list 113 deny ip x.x.x.x. x.x.x.x. x.x.x.x. x.x.x.x.x
access-list 113 permit ip x.x.x.x any
!
!
!
!
control-plane
!
banner motd ^CC^C
!
line con 0
transport input none
stopbits 1
line vty 0 4
password x.x.x.x
login local
transport input ssh
!
wsma agent exec
!
wsma agent config
!
wsma agent filesys
!
wsma agent notify
03-02-2020 12:40 PM
Hello,
I assume the web server and the local clients are in the same LAN subnet connected to interface GigabitEthernet0/0/1 ? Can you ping the web server from the clients ?
03-02-2020 01:24 PM
03-02-2020 03:13 PM
03-13-2020 10:45 AM
03-13-2020 10:47 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide