I have router 881. I prepare simply configuration with two vlan and one of them is DMZ with www server. Everything look all right with one exception. NAT not work at all. I have no entry when i type command sh ip nat translation. I try configure NAT in several ways (pools, static, one host, whole network, only one network, separate acl for networks itd.) there is no change. NAT still not work and sh ip nat trans show nothing. My config look's that:
interface FastEthernet0
description Lan
switchport access vlan 2
no ip address
!
interface FastEthernet1
description lan
switchport access vlan 2
no ip address
!
interface FastEthernet2
description lan
switchport access vlan 2
no ip address
!
interface FastEthernet3
description dmz
switchport access vlan 6
no ip address
!
interface FastEthernet4
description WAN$FW_OUTSIDE$
ip address X.X.X.X X.X.X.X
ip access-group 105 in
ip nat outside
ip virtual-reassembly in
ip verify unicast reverse-path
duplex auto
speed auto
interface Vlan2
description LAN$FW_INSIDE$
ip address 192.168.1.1 255.255.255.0
ip access-group 103 in
ip nat inside
ip inspect CCP_LOW in
ip virtual-reassembly in
!
interface Vlan6
description DMZ$FW_DMZ$
ip address 192.168.2.1 255.255.255.0
ip access-group 104 in
ip nat inside
ip inspect dmzinspect out
ip virtual-reassembly in
ip nat inside source list 2 interface FastEthernet4 overload
ip nat inside source static tcp 192.168.2.17 80 interface FastEthernet4 80
ip route 0.0.0.0 0.0.0.0 FastEthernet4
access-list 2 permit 192.168.1.0 0.0.0.255
Can anyone help me resolv this problem ?
ROM: System Bootstrap, Version 12.4(22r)YB5, RELEASE SOFTWARE (fc1)
Cisco 881-K9
