Routing - Cisco C8200L NAT and Huawei modem

[Stefan Mihajlov]

When u join to wifi network we want to open 192.168.8.2:8000 but nothing (this is CUCM).
They open only 192.168.8.2:80 and withouth port Cisco Gui for router
Routing
Router sh run:Routin

!
interface GigabitEthernet0/0/0
ip address 192.168.8.2 255.255.255.0
ip nat outside
negotiation auto

!

interface GigabitEthernet0/0/1
ip address 172.16.0.254 255.255.255.0
ip nat inside
negotiation auto
!
interface GigabitEthernet0/0/2
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/3
no ip address
shutdown
negotiation auto
!
ip forward-protocol nd
ip tftp source-interface GigabitEthernet0/0/1
ip http server
ip http authentication local
ip http secure-server
!
ip nat inside source static tcp 172.16.0.250 80 192.168.8.2 8000 extendable
ip route 0.0.0.0 0.0.0.0 192.168.8.1
ip ssh bulk-mode 131072
!
!



On Huawei we set Cisco router as DMZ host.


Router sh ip nat translations
sh ip nat translations
Pro Inside global Inside local Outside local Outside global
tcp 192.168.8.2:8000 172.16.0.250:80 --- ---
tcp 192.168.8.2:8000 172.16.0.250:80 192.168.8.102:37270 192.168.8.102:37270
tcp 192.168.8.2:8000 172.16.0.250:80 192.168.8.136:56045 192.168.8.136:56045
tcp 192.168.8.2:8000 172.16.0.250:80 192.168.8.102:37282 192.168.8.102:37282
tcp 192.168.8.2:8000 172.16.0.250:80 192.168.8.136:56044 192.168.8.136:56044
tcp 192.168.8.2:8000 172.16.0.250:80 192.168.8.136:56054 192.168.8.136:56054
tcp 192.168.8.2:8000 172.16.0.250:80 192.168.8.136:56043 192.168.8.136:56043
tcp 192.168.8.2:8000 172.16.0.250:80 192.168.8.136:56053 192.168.8.136:56053
tcp 192.168.8.2:8000 172.16.0.250:80 192.168.8.136:56052 192.168.8.136:56052
tcp 192.168.8.2:8000 172.16.0.250:80 192.168.8.102:49018 192.168.8.102:49018
Total number of translations: 10

But we cant still open Cucm

[Flavio Miranda]

@Stefan Mihajlov 

 NAT is right. 

Telnet test stablish connection? This can be something else, maybe browser issue. Local access to CUCM is fine?

[Stefan Mihajlov]

@Flavio Miranda 


All is good,we will use Huawei modem for remote enter to CUCM but when we try we cant open cucm,we try another browser but not working,yes addr is fine

[Flavio Miranda]

But the modem on this case is working as a bridge for users behind it?  If you plug a PC instead the modem ? does it work? 

 How can you be sure the modem is not the problem here?

[Stefan Mihajlov]

I haven't tested connecting a PC directly to the modem because I intend to use the CUCM (Cisco Unified Communications Manager) server for remote access. From my understanding, everything is configured correctly as I can access the Cisco GUI for the router at 192.168.8.2, but I’m having trouble accessing CUCM at 192.168.8.2:8000.

The issue seems to be with accessing CUCM on that port, as the rest of the network is properly configured, and accessing the router via port 80 (the default Cisco GUI port) works fine.

HUawei modem is https://www.exeshop.rs/artikal/huawei-b311-221-lte---4g-router-n300

[Flavio Miranda]

Try to remove the word extendable, you dont need it. 

[Stefan Mihajlov]

I tried it dont work,maybe huawei are problem bcs its modem

[Flavio Miranda]

i would try to add a PC with IP address 192.168.8.1 just to make sure this is not the modem.. 

[Stefan Mihajlov]

Will try at 8:30 in Serbian time becase it on work

[Stefan Mihajlov]

R-KM-2#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
tcp 192.168.8.2:8000 172.16.0.250:80 --- ---
tcp 192.168.8.2:8000 172.16.0.250:80 192.168.8.102:50456 192.168.8.102:50456
tcp 192.168.8.2:8000 172.16.0.250:80 192.168.8.102:50458 192.168.8.102:50458
tcp 192.168.8.2:8000 172.16.0.250:80 192.168.8.102:50455 192.168.8.102:50455
Total number of translations: 4

@Flavio Miranda again and still cant open

[Stefan Mihajlov]

R-KM-2#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
tcp 192.168.8.2:8000 172.16.0.250:80 --- ---
tcp 192.168.8.2:8000 172.16.0.250:80 192.168.8.1:50564 192.168.8.1:50564
tcp 192.168.8.2:8000 172.16.0.250:80 192.168.8.1:50566 192.168.8.1:50566
tcp 192.168.8.2:8000 172.16.0.250:80 192.168.8.1:50563 192.168.8.1:50563


We replace modem w PC and dont work

[Flavio Miranda]

@Stefan Mihajlov 

Try to use a different Port, try to use Port 443 for example

 And, disable http service on router

The NAT is configured correctly, but maybe the connection is not going to CUCM

Can you replace the CUCM for a PC with wireshark?

 Is this a physical CUCM? Or virtual?

[Stefan Mihajlov]

i tried 800 port 8000 port, 443,disable http also but not working,cucm are Cisco Business 6000 physical

[Flavio Miranda]

Next step is make sure the connection is actually getting to CUCM as the NAT is taking place.

[paul driver]

Hello
excluding the nat for one moment can you reach that cucm internally via http?