Hello, thanks for the reply -- I got confused with different blog posts.
I've updated my configuration to use ip nat enable and turn off ip nat inside and ip nat outside; however, I notice two things.
1) basic NAT works, but internet access behind the nat (192.168.1.xxx) is very slow for buildup -- I seem to have introduced some kind of confusion in there.
2) hairpinning doesn't work. no access possible from 192.168.1.xxx to XXX.XXX.XXX.XXX as from outside. Any idea how to fix that?
Below my updated (much simpler) configuration.
version 15.8
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec
no service password-encryption
!
hostname k7b
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$2iKo$llXBSoO8.MJ653mk/gWuG.
!
no aaa new-model
clock timezone CET 1 0
clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 3:00
!
!
!
!
!
!
!
!
ip dhcp excluded-address 192.168.1.1 192.168.1.10
ip dhcp excluded-address 192.168.1.240 192.168.1.250
!
ip dhcp pool base
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 185.67.172.25 185.67.172.26
!
ip dhcp pool alien
host 192.168.1.100 255.255.255.0
client-identifier 0130.d042.e15a.1e
client-name alien
!
!
!
no ip cef
no ipv6 cef
multilink bundle-name authenticated
!
!
!
license udi pid C931-4P sn PSZ23471M4K
!
!
username admin password 0 ********
!
redundancy
!
!
!
!
!
!
interface GigabitEthernet0
switchport mode access
no ip address
!
interface GigabitEthernet1
switchport mode access
no ip address
!
interface GigabitEthernet2
no ip address
!
interface GigabitEthernet3
no ip address
!
interface GigabitEthernet4
ip dhcp client client-id ascii k7b
ip address dhcp
no ip redirects
ip nat enable
duplex auto
speed auto
!
interface GigabitEthernet5
no ip address
shutdown
duplex auto
speed auto
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
no ip redirects
ip nat enable
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip nat source list 1 interface GigabitEthernet4 overload
ip nat source static tcp 192.168.1.240 80 XXX.XXX.XXX.XXX 80 extendable
ip nat source static tcp 192.168.1.240 443 XXX.XXX.XXX.XXX 443 extendable
ip nat source static tcp 192.168.1.100 22 XXX.XXX.XXX.XXX 2222 extendable
ip nat source static tcp 192.168.1.99 80 XXX.XXX.XXX.XXX 7777 extendable
ip nat source static tcp 192.168.1.101 21 XXX.XXX.XXX.XXX 8989 extendable
ip nat source static tcp 192.168.1.101 20 XXX.XXX.XXX.XXX 50020 extendable
ip nat source static tcp 192.168.1.101 21 XXX.XXX.XXX.XXX 50021 extendable
ip nat source static tcp 192.168.1.101 80 XXX.XXX.XXX.XXX 50080 extendable
ip nat source static tcp 192.168.1.101 8543 XXX.XXX.XXX.XXX 58543 extendable
ip route 0.0.0.0 0.0.0.0 GigabitEthernet4
ip ssh version 2
!
!
!
access-list 1 permit XXX.XXX.XXX.XXX
access-list 1 permit 192.168.100.100
access-list 1 permit 192.168.1.0 0.0.0.255
!
control-plane
!
!
line con 0
line vty 0 4
login local
transport input ssh
!
scheduler allocate 20000 1000
ntp server 0.at.pool.ntp.org minpoll 10
!
end
