ACL Help Needed PLEASE

[jamesberry42]

I recently implemented a Cisco 1941 router and Cisco 2960 switch into my home network.  My network is designed as follows:

Cable Modem > Cisco 1941 > Cisco 2960 > Linksys wireless router

I have a webcam that works over WiFi so it is connected wirelessly to the Linksys router and has static IP of 192.168.24.111 assigned and it is using port 999.  I have an app on my phone that I used to be able to use to view the camera when I am not home, but since adding the Cisco equipment this no longer works.  I am assuming that I need some type of ACL to allow me to view the camera over the internet.  I have attached my router and switch config and my Linksys has the following IP scheme:

IP: 192.168.24.1

Subnet: 255.255.255.0

Gateway: 192.168.1.1

What do I need to add to the router and maybe the switch to allow this to work?  Please help!

[paul driver]

hello

i cannot see your attached files at present.

are you natting this internal address for the internet?

res
paul


Sent from Cisco Technical Support Android App

[jimmysands73_2]

Your IP address of your camera is not in your nat pool/ip acl...

ip nat inside source list 101 interface GigabitEthernet0/0 overload

!

access-list 101 permit ip 192.168.1.0 0.0.0.255 any

!

The IP of your camera is

IP: 192.168.24.1

This falls outside of 192.168.1.0

Plus, the subnet of your IP is not in the subnet of the gw.

While I did not look at your entire config, it seems like you should be able to modify

access-list 101 permit ip 192.168.1.0 0.0.0.255 any

to

access-list 101 permit ip 192.168.0.0 0.0.255.255 any

Wait...looking at it more, why use extended ACL, wouldnt you want standard? 

access-list 10 permit 192.168.0.0 0.0.255.255

ip nat inside source list 10 interface GigabitEthernet0/0 overload

I was on my way out the door....will check back to see how it worked or if other have chimed in (and to verify I didnt mess this up further!)....good luck!

[mfurnival]

I would echo jimmysands73_2 comments regarding the ACL but first you need to sort out your routing. The camera can't see your router. You need to either change the camera IP address to be something in the 192.168.1.x range or configure a secondary address on the router LAN interface in the 192.168.24.x subnet.