I've got a network behind a cisco 2811 running the config below...Note: The Fast/Ethernet0/1 is now my external connection and serial is disabled.
I can connect to the internet, and the internet can see me, but I am unable to see my external ips from the internet. I recently had an ip change from t1 to fiber, and that's why I've disabled the serial and I'm using the fasteth01. Do you think there is just a simple routing issue I haven't accomodated for, or do you think there is a remnant somewhere deep in the config I am not seeing?
Thanks in advance!
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service sequence-numbers
ip subnet-zero
no ip source-route
ip tcp synwait-time 10
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 10.10.10.1
!
ip dhcp pool default
import all
network 10.10.10.0 255.255.255.0
dns-server 209.244.0.3 209.244.0.4
default-router 10.10.10.1
!
interface FastEthernet0/0
description $ETH-SW-LAUNCH$$INTF-INFO-FE 0/0$$ES_LAN$$FW_INSIDE$$ETH-LAN$
ip address 10.10.10.1 255.255.255.0
ip access-group 100 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip route-cache flow
duplex auto
speed auto
no mop enabled
!
interface FastEthernet0/1
description $FW_OUTSIDE$$ETH-LAN$
ip address 64.100.200.174 255.255.255.252
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat outside
ip route-cache flow
duplex full
speed 100
no mop enabled
!
ip classless
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1 permanent
ip route 10.10.10.0 255.255.255.0 FastEthernet0/0 permanent
!
ip http server
ip http access-class 3
ip http authentication local
ip http timeout-policy idle 5 life 86400 requests 10000
ip nat pool DynamicIPPool 64.100.200.97 64.100.200.102 netmask 255.255.255.224
ip nat inside source list 1 pool DynamicIPPool overload
ip nat inside source static tcp 10.10.10.129 80 64.100.200.103 80 extendable
!
logging trap debugging
access-list 1 remark INSIDE_IF=FastEthernet0/0
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 10.10.10.0 0.0.0.255
access-list 3 remark Auto generated by SDM Management Access feature
access-list 3 remark SDM_ACL Category=1
access-list 3 permit 10.10.10.0 0.0.0.255
access-list 100 remark Auto generated by SDM Management Access feature
access-list 100 remark SDM_ACL Category=1
access-list 100 permit tcp 10.10.10.0 0.0.0.255 host 10.10.10.1 eq telnet
access-list 100 permit tcp 10.10.10.0 0.0.0.255 host 10.10.10.1 eq 22
access-list 100 permit tcp 10.10.10.0 0.0.0.255 host 10.10.10.1 eq www
access-list 100 permit tcp 10.10.10.0 0.0.0.255 host 10.10.10.1 eq cmd
access-list 100 deny tcp any host 10.10.10.1 eq telnet
access-list 100 deny tcp any host 10.10.10.1 eq 22
access-list 100 deny tcp any host 10.10.10.1 eq www
access-list 100 deny tcp any host 10.10.10.1 eq 443
access-list 100 deny tcp any host 10.10.10.1 eq cmd
access-list 100 deny udp any host 10.10.10.1 eq snmp
access-list 100 permit ip any any
access-list 101 remark Auto generated by SDM Management Access feature
access-list 101 remark SDM_ACL Category=1
access-list 101 permit ip 10.10.10.0 0.0.0.255 any
access-list 102 remark Auto generated by SDM Management Access feature
access-list 102 remark SDM_ACL Category=1
access-list 102 permit ip 10.10.10.0 0.0.0.255 any
no cdp run
line con 0
login local
transport output telnet
line aux 0
login local
transport output telnet
line vty 0 4
access-class 101 in
privilege level 15
login local
transport input telnet
line vty 5 15
access-class 102 in
privilege level 15
login local
transport input telnet
!
scheduler allocate 20000 1000
