Cisco static nat issue

[Ayushjav Lkhagvasuren]

Hello everyone. I just did configuration on Cisco 892F router. Everything works fine, but static nat is not working. I create static nat on tcp port 80 (http). I don't know where is the problem. All nats working fine except static nat. Even though internet connection is ok in my lan,

i cannot access my router from the internet. Does anyone have an idea on that?

Thanks,

[Ayushjav Lkhagvasuren]

i attached router's show run log.

[johnlloyd_13]

hi,

could you add ACE:

access-list 101 permit tcp any host 10.0.0.3 eq 80

[Ayushjav Lkhagvasuren]

Hi, John Lloyd

Thanks for your quick response.I tried this. But it's still not working.

[Ayushjav Lkhagvasuren]

Now this router is working. My Lan has an Internet connection. But ping is not going to my router from the internet. I think this is the problem. IP address is 202.55.183.82, you can ping it.

[blau grana]

Hello,

Try instead

access-list 101 permit tcp any host 10.0.0.3 eq 80

this rule:

access-list 101 permit tcp any host 202.55.183.85 eq 80

I think you have to list public IP address instead of private address, but I am not sure. Please try it and let us know

Best Regards

Please rate all helpful posts and close solved questions

[cadet alain]

Hi,

can you do this in addition to the ACL referencing the public IP posted by blau grana:

EDIT: in zone based firewall you must reference the inside address and not the outside address so leave the ACL 101 as it was originally and add this command to global config

ip http port 8080

Regards

Alain

Don't forget to rate helpful posts.