Please help with Port Forwarding Cisco Router 1841

godwin osas · ‎01-11-2016

I am studying for my CCNA and have setup my home lab. Home lab consist of TWC cable modem, Cisco 1841 Router, Cisco 2950 24 Port switch, and 1 TP link wireless router.

Cable modem is connected to the 1841 router interface FastEthernet0/0 and FastEthernet0/1 connect to the 2950 switch, and the wireless router is connected to the switch, dhcp is disabled on the wireless router. I have a 2 PC's connected to the switch, 1 Window PC and 1 Linux PC running Apache 2 web-server. So far all the host in the LAN can browse the web.

Prior to setting up the CCNA, I used to be able to access my dyndns hostname from the web as I was only using the wireless router and port forwarding was enabled.

I have been trying to configure the port forwarding and none of the configuration seems to be working. I can access the web page from inside the LAN using the local IP address of 192.168.0.9 but cannot access the domain from the WAN/web. I can ping my dyndns hostname without any problem, but NAT is not translating the IP address to domain name.

Below is my running configuration. Please excuse me for my configuration file as I am a complete newbies. Any help will be highly appreciated.

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2016.01.11 14:06:35 =~=~=~=~=~=~=~=~=~=~=~=
login as: nonepwd
Using keyboard-interactive authentication.
Password:

nonepwdR1>en
Password:
nonepwdR1#show runn
nonepwdR1#show running-config
Building configuration...

Current configuration : 2586 bytes
!
version 15.0
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname nonepwdR1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$Fw/.$uC9VPReatBEHvy2VDUeSr/
enable password nonepwd
!
no aaa new-model
!
!
!
dot11 syslog
ip source-route
!
       -!
       -ip dhcp excluded-address 192.168.0.1 192.168.0.4
       -ip dhcp excluded-address 192.168.0.105
       -!
       -ip dhcp pool Home_Clients
       - import all
       - network 192.168.0.0 255.255.255.0
       - default-router 192.168.0.1
       -!
       -ip dhcp pool Home_Clients
       - client-identifier 011e.c934.20f80
       -!
       -ip dhcp pool Static
       - host 192.168.0.12 255.255.255.0
       - client-identifier 001e.c974.50f6
       -!
       -ip dhcp pool Static2
       - host 192.168.0.7 255.255.255.0
       - client-identifier 016c.fka7.108f.80
       -!
       -!
       -ip cef
       -ip domain name pete.dyndns.org
       -ip name-server 15.18.17.21
       -ip name-server 15.18.17.22
       -ip ddns update method DynDNS
       - HTTP
       -add http://nonepwd09:nonepwd@members.dyndns.org/nic/updatepete=<h>&myip=<a>
       -remove http://nonepwd009:nonepwd@members.dyndns.org/nic/updatehostname=<h>&myip=<a>
       - interval maximum 0 0 1 0
       -!
       -no ipv6 cef
       -!
       -multilink bundle-name authenticated
       -!
       -!
       -!
       -!
       -!
       -license udi pid CISCO1841 sn FTX144101RG
       -username nonepwd password 0 nonepwd
       -!
       -redundancy
       -!
       -!
       -ip ssh version 2
       -!
       -!
       -!
       -!
       -!
       -!
       -!
       -interface FastEthernet0/0
       - ip address dhcp
       - ip nat outside
       - ip virtual-reassembly
       - speed auto
       - full-duplex
       - no cdp enable
       - no mop enabled
       - !
       -!
       -interface FastEthernet0/1
       - ip address 192.168.0.1 255.255.255.0
       - ip nat inside
       - ip virtual-reassembly
       - duplex auto
       - speed auto
       - no cdp enable
       - !
       -!
       -interface Serial0/0/0
       - no ip address
       - shutdown
       - no cdp enable
       - !
       -!
       -ip forward-protocol nd
       -no ip http server
       -no ip http secure-server
       -!
       -!
       -ip nat inside source list 101 interface FastEthernet0/0 overload
       -ip nat inside source static tcp 192.168.0.9 80 interface FastEthernet0/1 80
       -ip nat inside source static tcp 192.168.0.9 8080 interface FastEthernet0/1 8080
       -ip nat inside source static tcp 192.168.0.12 80 interface FastEthernet0/0 80
       -!
       -ip access-list extended MyFirewall
       - permit tcp any host 192.168.0.12 eq www
       -ip access-list extended nat
       - permit ip any any
       -!
       -access-list 101 permit ip 192.168.0.0 0.0.0.255 any
       -access-list 101 permit tcp any any eq www
       -access-list 101 permit tcp 192.168.0.0 0.0.0.255 any eq www
       -no cdp run
       -
       -!
       -!
       -!
       -!
       -!
       -!
       -control-plane
       - !
       -!
       -!
       -line con 0
       -line aux 0
       -line vty 0 4
       - exec-timeout 30 0
       - password nonepwd
       - login local
       -line vty 5 15
       - exec-timeout 30 0
       - login local
       -!
       -scheduler allocate 20000 1000
       -no process cpu extended
       -no process cpu autoprofile hog
       -end
       -
nonepwrdR1#

veerappan · ‎01-11-2016

Hi,

Have you tried to check by manually assign the ip address on interface FastEthernet0/0, as you mention that dhcp is not enabled on the wireless router.

Cheers,

VV

godwin osas · ‎01-11-2016

Hi, the interface FastEthernet0/0 is connected to the cable modem and it is dhcp enabled. I do not have a static IP with my ISP. The interface FastEthernet0/1 is connected to the switch and dhcp pool is configured on this interface. The PC that host my web-server is connected to the switch.

Thank you.

veerappan · ‎01-11-2016

Hi, Did you try adding in the default route towards Fa0/0

godwin osas · ‎01-11-2016

Yes I did earlier and that cause a lot of trouble including slow Internet access, I do have a default-router 192.168.0.1. I guess it has something to do with my NAT or access-list.

veerappan · ‎01-11-2016

If you were able to access the Internet with the default route with the same NAT/ACL config. The slowness may be due to something else then.

Just wanted to confirm again, is the issue accessing the server from the internet or accessing the internet from the server?

godwin osas · ‎01-12-2016

The issue is that I cannot access the website that is hosted on one of the the PC in the LAN from the Internet, I can access it within the LAN using the local IP address 192.168.0.9. I have a dnsdyn.org account.

Thanks.

godwin osas · ‎01-12-2016

Is working now, what happened is that I can access my dyndns.org hostname outside of the lan using a public IP, example I tried using my cell phone to access my domain name and it works. I can only access the same page within the LAN by using the local IP. I think that is the way it was meant to work. Thank you .