Problem Configuring NAT to Allow the Internet to Access Internal Devices

[saif_farooq]

Hi,

I want to allow my internal Web Server (CCTV) on private IP(192.168.1.2) to be accessed from the internet. I have already configured NAT for PCs on private IPs to access Internet.

Now the problem im facing is "I cannot access my Local Lan Web Server PC" from Internet. Kindly look at the configuration below & let me know where Im doing mistake. Also kindly check the 'routes' that I have given, as I've seen some sample configs but they are without 'routes'.

Also can u pls tell me if I need a 'route-map' to direct traffic from Internet to local Web-Server.

Configuration:

!
interface FastEthernet0/0
ip address 192.168.1.1 255.255.255.0
ip nat inside
!
interface FastEthernet1/0
ip address 192.168.100.10 255.255.255.0 (for reference,,although its Public IP in actual)
ip nat outside

!

ip nat inside source list 10 interface FastEthernet1/0 overload

ip nat inside source static 192.168.1.2 192.168.100.11

ip route 0.0.0.0 0.0.0.0 192.168.100.1 (Gateway Modem)

!

access-list 10 permit 192.168.1.0 0.0.0.255

access-list 101 permit ip any 192.168.100.11 0.0.0.255

!

!

Router_7200#sh ip nat translations
     Pro Inside global      Inside local       Outside local      Outside global
tcp 192.168.100.11:80    192.168.1.2:80       ---                ---

Please note I cannot see any output in Debug IP NAT,

Regards & Thanks in advance!!

[spaul0094@gmail.com]

Sir i want to connect my ten private ip access by outside internet.Sir i am using this command - 

Ip nat inside source static tcp 192.168.215.91 3389 45.64.221.143 3389.Actually sir i want to access for remote desktop....sir how can i add ip range 192.168.215.92-100 in static nat....because when i am using this command Ip nat inside source static tcp 192.168.215.92 3389 45.64.221.143 3389.This time show gateway ip already exit....