NAT rule on Cisco C887VA-K9 (telnet)

[SylvainLT]

Hello,
I would like to expose my problem. I know that it's not a complicated one, but i don't have not enough knowledge.

I have a local network (192.168.1.0/24).
A cisco C887VA-K9 is directly connected on Internet with a static IP (172.16.1.100 configured on Dialer0) and also to the local network (IP : 192.168.1.1)
On the local network there is a satellite modem (ip : 192.168.1.2)
With a PC out of my local network (IP : 172.16.30.1), i would like to be connected to this modem with telnet. But i don't know how to configure the Cisco to permit this connection.

On interface Dialer0, "ip nat outside" is configured.
There is also an "access-list extended internet-in".
On interface VLAN10, "ip nat inside" is configured. No access-list.

I tested with adding a line in this access-list : permit tcp any host 192.168.1.2 eq 23
and i added a NAT rule : ip nat inside source static tcp 192.168.1.2 23 interface dialer0 23

but no response from my external PC (on the local network, I connect to the modem with telnet).

I tried with removing the access-list from Dialer0, but no results, always the same problem.

So i don't know how if there is a probleme with my NAT rule.

By advance, Thank you for your help

[Jon Marshall]

Your NAT rule is fine as far as I can tell. 

If you do use an acl then you need to refer to the 172.16.1.100 IP address and not the 192.168.1.2 if the acl is on the WAN interface applied inbound. 

Does the modem have a default route pointing to the router ? 

Jon

[SylvainLT]

Hello Jon,

The sat modem doesn't have a default route.

[SylvainLT]

I added an ACL "permit tcp host any 23 172.16.1.100 eq 23", but no effect.

[SylvainLT · Accepted solution]

I added a default route on the sat modem and now it's working fine.

Thank you Jon for your help.

sincerely.