Nat hairpin on a 881 router

[jeremy meng]

Hi,

Is it possible to activate nat harpin to activate nat hairpin so that internal user can access to an internal server by rdp with the WAN IP adress ?

By default the typical configuration is

int fa 4

description wan
ip addresse X.X.X.X
ip nat enable

translation nat rule:
ip nat source static tcp Y.Y.Y.Y 3389 interface FastEthernet4 3389

Where Y.Y.Y.Y is the server IP adresss

Thanks for your help

[jeremy meng]

Hi,

No answer ?

[jeremy meng]

Hi,

I need really a help for this question

[cadet alain]

Hi,

The NAT NVI solution you posted  will do the job with ip nat enable on both NAT interfaces and no ip redirect on both interfaces.

Regards

Alain

[jeremy meng]

Hi,

I think something is still missing

Here a test configuration from a cisco 887 connected on an ADSL
 

interface ATM0
 no ip address
 ip nat enable
 no atm ilmi-keepalive
 pvc 8/35
  cbr 150
  tx-ring-limit 2
  encapsulation aal5mux ppp dialer
  dialer pool-member 10
 !
!
interface FastEthernet0
 description LAN DATA
 switchport access vlan 2
!
interface FastEthernet1
 description LAN DATA
 switchport access vlan 2
!
interface FastEthernet2
 description LAN DATA
 switchport access vlan 2
!
interface FastEthernet3
 description LAN DATA
 switchport access vlan 2
!
interface Vlan1
 no ip address
!
interface Vlan2
 ip address 192.168.1.1 255.255.255.0
 no ip redirects
 ip nat enable
 ip virtual-reassembly in
!
!
interface Dialer10
 ip address negotiated
 no ip redirects
 ip nat enable
 ip virtual-reassembly in
 encapsulation ppp
 dialer pool 10
 dialer-group 10
 ppp authentication chap callin
 ppp chap hostname adslprod@ioadsl
 ppp chap password 0 adslprod
 ppp ipcp dns request
 no cdp enable
 hold-queue 224 in
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
no ip nat service sip udp port 5060
ip nat source list nat interface Dialer10 overload
ip nat source static tcp 192.168.1.200 3389 interface Dialer10 3389
ip route 0.0.0.0 0.0.0.0 Dialer10
!
ip access-list standard nat
 permit 192.168.1.0 0.0.0.255
!
logging esm config
!

192.168.1.200 is the device with rdp enable on it

Can you help on what is missing ?

Thanks

[jeremy meng]

Hi,

Looking for some help ?

Thanks
 

[jeremy meng]

Hi,

No answer ?

Thanks