Nat inside Cisco881

isdmarvie · ‎12-03-2012

Bonjour a tous

Le problème de la mise a jour du Dyndns focntionne correctement a présent, mais la NAT elle ne focntionne pas

Si quelqu'un vois la raison......

Merci d'avance

interface Dialer1

ip ddns update hostname wellmess6780.dyndns.org

ip ddns update wellmess6780_dyndns

ip address negotiated

no ip redirects

no ip unreachables

no ip proxy-arp

ip mtu 1492

ip nat outside

ip virtual-reassembly in

encapsulation ppp

dialer pool 1

dialer idle-timeout 0

dialer persistent

ppp authentication chap pap callin

ppp chap hostname

MyLogin@SKYNET

ppp chap password 7 01125F575611505C38

ppp ipcp dns request

no cdp enable

!

ip default-gateway 192.168.16.254

ip forward-protocol nd

no ip http server

ip http port 8088

ip http access-class 23

ip http authentication local

ip http secure-server

ip http timeout-policy idle 60 life 86400 requests 10000

!

ip nat inside source static tcp 192.168.16.99 80 interface Dialer1 80

ip nat inside source static tcp 192.168.16.99 21 interface Dialer1 21

ip nat inside source static tcp 192.168.16.99 1433 interface Dialer1 1433

ip nat inside source static tcp 192.168.16.99 3389 interface Dialer1 3389

ip nat inside source static tcp 192.168.16.99 3160 interface Dialer1 3160

ip nat inside source list 100 interface Dialer1 overload

ip route 0.0.0.0 0.0.0.0 Dialer1

!

access-list 100 permit ip 192.168.16.0 0.0.0.255 any

no cdp run

cadet alain · ‎12-04-2012

Hi,

what do you mean by NAT is not working properly ?

Is routing working properly ? Can you ping 8.8.8.8 from the router ? if so then when you try from a host what is the output of sh ip nat translation | i 8.8.8.8 ?

Regards.

Alain

Regards.

Alain

Don't forget to rate helpful posts.

isdmarvie · ‎12-04-2012

Hi Alain

No, I can not ping 8.8.8.8 from the router

wellmess#sh ip nat translations | i 8.8.8.8

wellmess#

wellmess#ping 8.8.8.8

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:

.....

Success rate is 0 percent (0/5)

wellmess#

my goal is to be able to connect to remote (Internet) on my server via port 3389 and SQL Server 1433.

as http and ftp (port 21 and 80) my goal is to be able to connect to remote (Internet) on my server via port 3389 and SQL Server 1433.
as http and ftp (port 21 and 80)

cadet alain · ‎12-04-2012

Hi,

ok post output of following:

-sh ip int br

-sh ip route

- sh ip cef 8.8.8.8

Regards.

Alain

Don't forget to rate helpful posts.

isdmarvie · ‎12-04-2012

see below

wellmess#sh ip int br
Interface                  IP-Address      OK? Method Status                Protocol
Dialer1                    unassigned      YES IPCP   up                    up
FastEthernet0              unassigned      YES unset up                    up
FastEthernet1              unassigned      YES unset administratively down down
FastEthernet2              unassigned      YES unset administratively down down
FastEthernet3              unassigned      YES unset administratively down down
FastEthernet4              unassigned      YES NVRAM up                    up
NVI0                       unassigned      YES unset administratively down down
Virtual-Access1            unassigned      YES unset up                    up
Virtual-Access2            unassigned      YES unset down                  down
Vlan1                      192.168.16.254 YES NVRAM up                    up
wellmess#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       + - replicated route, % - next hop override

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

S*    0.0.0.0/0 is directly connected, Dialer1
      192.168.16.0/24 is variably subnetted, 2 subnets, 2 masks
C        192.168.16.0/24 is directly connected, Vlan1
L        192.168.16.254/32 is directly connected, Vlan1
wellmess#sh ip cef 8.8.8.8
0.0.0.0/0
attached to Dialer1
wellmess#

isdmarvie · ‎12-04-2012

Hi , sorry ( router as not connectet for show command )

see below ( it's more correct )

wellmess#sh ip int br
Interface                  IP-Address      OK? Method Status                Protocol
Dialer1                    91.179.101.56   YES IPCP   up                    up
FastEthernet0              unassigned      YES unset up                    up
FastEthernet1              unassigned      YES unset administratively down down
FastEthernet2              unassigned      YES unset administratively down down
FastEthernet3              unassigned      YES unset administratively down down
FastEthernet4              unassigned      YES NVRAM up                    up
NVI0                       91.179.101.56   YES unset administratively down down
Virtual-Access1            unassigned      YES unset up                    up
Virtual-Access2            unassigned      YES unset up                    up
Vlan1                      192.168.16.254 YES NVRAM up                    up
wellmess#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       + - replicated route, % - next hop override

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

S*    0.0.0.0/0 is directly connected, Dialer1
      91.0.0.0/32 is subnetted, 2 subnets
C        91.179.101.1 is directly connected, Dialer1
C        91.179.101.56 is directly connected, Dialer1
      192.168.16.0/24 is variably subnetted, 2 subnets, 2 masks
C        192.168.16.0/24 is directly connected, Vlan1
L        192.168.16.254/32 is directly connected, Vlan1
wellmess#sh ip cef 8.8.8.8
0.0.0.0/0
attached to Dialer1
wellmess#

cadet alain · ‎12-04-2012

Hi,

ok now do this:

enable

config t

logging on

logging buffered 100000 debugging

access-list 199 permit icmp any any

do debug interface dialer 1

do debug ip packet detail 199

do ping 8.8.8.8 rep 1

do sh log

and post the output

Regards.

Alain

Don't forget to rate helpful posts.

isdmarvie · ‎12-05-2012

Hi Alain

I apologize for the delay

Ok, now everything is Ok, I'm trying to ereur from the LAN, but when I'm on a machine that is on the WAN, then I can connect via port 3389 on the server. That is to say that NAT is working properly to the internal address.

Again thank you for your great support for DDNS

Thierry

cadet alain · ‎12-05-2012

Hi Thierry,

glad it is working .

Regards.

Alain

Don't forget to rate helpful posts.