Hi all,
We are having CISCO 836 and Micrsoft SBS 2k3 server. I am trying to configure router so it would be able to allow outside world accessing our web pages on the SBS server (in mz configuration I am using DNS servers provided by my ISP).
After applying NAT translation, the only thing I can do right now is accessing our web pages localy from e.g. 192.168.1.12 (web server is on IP address 192.168.1.5 port 80)
What I don't know is why I cannot reach our web site from outside company? Also, I will setup Exchange server on SBS server and would like to know if there is anything else to consider other than port forwading?
Applying sh ip nat trans ... router responds
router#sh ip nat trans
Pro Inside global Inside local Outside local Outside global
tcp 213.250.XX.XX:80 192.168.1.5:80 --- ---
tcp 213.250.XX.XX:2942 192.168.1.5:2942 193.x.x.11:53 193.189.160.11:53
tcp 213.250.XX.XX:2943 192.168.1.5:2943 193.x.x.11:53 193.189.160.11:53
What I don't understand is why in second line there is tcp 213.250.X.X port 2942 instead of 213.250.X.X port 80 ?
... bellow is router configuration:
Current configuration : 3937 bytes
!
! Last configuration change at 02:29:55 CEST Tue May 10 2005
! NVRAM config last updated at 02:48:14 CEST Tue May 10 2005
!
version 12.3
........
ip dhcp pool CLIENT
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 193.x.x.11 193.189.160.12
lease 0 2
!
!
...............
interface Ethernet0
ip address 192.168.1.1 255.255.255.0
ip access-group 122 out
ip nat inside
!
interface BRI0
no ip address
shutdown
!
interface ATM0
no ip address
atm ilmi-keepalive
pvc 1/32
pppoe-client dial-pool-number 1
!
dsl operating-mode auto
!
interface FastEthernet1
no ip address
duplex auto
speed auto
.........
interface Dialer1
ip address negotiated
ip access-group 111 in
ip nat outside
ip inspect myfw out
encapsulation ppp
ip tcp adjust-mss 1452
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname <removed>
ppp chap password 0 <removed>
ppp pap sent-username <removed> password 0 <removed>
!
ip nat inside source list 1 interface Dialer1 overload
ip nat inside source static tcp 192.168.1.5 80 interface Dialer1 80
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
ip http server
no ip http secure-server
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 111 permit tcp any any eq telnet
access-list 111 permit icmp any any administratively-prohibited
access-list 111 permit icmp any any echo
access-list 111 permit icmp any any echo-reply
access-list 111 permit icmp any any packet-too-big
access-list 111 permit icmp any any time-exceeded
access-list 111 permit icmp any any traceroute
access-list 111 permit icmp any any unreachable
access-list 111 permit udp any eq bootps any eq bootpc
access-list 111 permit udp any eq bootps any eq bootps
access-list 111 permit udp any eq domain any
access-list 111 permit esp any any
access-list 111 permit udp any any eq isakmp
access-list 111 permit udp any any eq 10000
access-list 111 permit tcp any any eq 1723
access-list 111 permit tcp any any eq 139
access-list 111 permit udp any any eq netbios-ns
access-list 111 permit udp any any eq netbios-dgm
access-list 111 permit gre any any
access-list 111 deny ip any any log
access-list 122 deny tcp any any eq telnet
access-list 122 permit ip any any
dialer-list 1 protocol ip permit
!
line con 0
no modem enable
line aux 0
line vty 0 4
exec-timeout 120 0
login local
length 0
!
scheduler max-task-time 5000
!
!
end
