Greetings,
I have the following issue:
I've got a 2821 router configured for NAT. It's supposed to grant access to a webserver on the local network at address 192.168.1.46, port 8080 from the outside network. The network address translation is working, I can see it with this command:
master#sh ip nat statistics Total active translations: 4 (0 static, 4 dynamic; 4 extended) Peak translations: 8, occurred 00:19:28 ago Outside interfaces: GigabitEthernet0/1 Inside interfaces: GigabitEthernet0/0 Hits: 54 Misses: 0 CEF Translated packets: 54, CEF Punted packets: 0 Expired translations: 15 Dynamic mappings: -- Inside Source Total doors: 0 Appl doors: 0 Normal doors: 0 Queued Packets: 0
However, the web server is still unreachable - no traffic is coming from it when I try to access it from the outside. Please help troubleshoot this, I am at a loss here.
Here is my router's config:
master#sh running-config Building configuration... version 15.1 service config service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname master ! boot-start-marker boot system flash:c2800nm-adventerprisek9-mz.151-4.M10.bin boot-end-marker ! ! ! no aaa new-model ! ! dot11 syslog ip source-route ! ! ip cef ! ! ! no ip domain lookup no ipv6 cef ! multilink bundle-name authenticated ! ! ! ! ! ! ! ! ! ! ! voice-card 0 ! crypto pki token default removal timeout 0 ! ! ! ! archive log config hidekeys ! redundancy ! interface GigabitEthernet0/0 description LAN ip address 192.168.1.3 255.255.255.0 ip nat inside ip virtual-reassembly in duplex auto speed auto no mop enabled ! interface GigabitEthernet0/1 description WAN ip address <Public IP address given by ISP> 255.255.255.0 ip nat outside ip virtual-reassembly in duplex auto speed auto ! ip forward-protocol nd no ip http server no ip http secure-server ! ! ip nat inside source static tcp 192.168.1.46 8080 interface GigabitEthernet0/1 8080 ip nat inside source list 100 interface GigabitEthernet0/1 overload ip route 0.0.0.0 0.0.0.0 <ISP's gateway> ! access-list 100 permit ip 192.168.1.0 0.0.0.255 any ! ! control-plane ! ! mgcp profile default !
... View more