Access to Cisco 860 using telnet/ssh/scp/http/https

[jackolantern66666]

Hello

i have cisco 860 router. I did configured dhcp on vlan that located on LAN network. also configured IP address on WAN network(gi0).

for example i have a Lan IP 10.10.x.x. and 132.50.x.x on Gi0. when i am trying to reach router from my PC that on Lan network (my pc got IP 10.10.x.x) using telnet or http it's working. but when i am trying to reach the router using telnet or ssh or http from the PC located on WAN(132.50.x.x) network it's not working(except the ping). what should i do to make it work?

sincerely yours.

[jackolantern66666]

and how to make a static DHCP leases with eternal ip addresses on the local network?

and how to make a connection from the external network(132.50.x.x) to the local one(10.10.x.x) should i make a static route?

[Mark Malone]

and how to make a static DHCP leases with eternal ip addresses on the local network?

sorry im not sure what you mean by this , dhcp pool would have private address space used , not public usually

and how to make a connection from the external network(132.50.x.x) to the local one(10.10.x.x) should i make a static route?

You need NAT for this , either static NAT or NAT  overload , have a quick look at this for static , also you will need a default route to your ISP so you can break out ot the public , ip route 0.0.0.0 0.0.0.0 (put there modem ip address here)

good example

http://www.omnisecu.com/cisco-certified-network-associate-ccna/how-to-configure-static-nat-in-cisco-router.php

For overload good example

http://www.firewall.cx/cisco-technical-knowledgebase/cisco-routers/260-cisco-router-nat-overload.html

[jackolantern66666]

I don't need a nat to the server. i need an access using "ssh" from the public network(132.50.x.x) to the local network(vlan1=10.10.10.1). how can i do it?

[Mark Malone]

if ssh is on and working , you just ssh to your public ip address you cant see the private ip coming from an external public source , as you cant see the private ip in the public domain so you have to ssh to whats reachable and that's your public

is this on the internet yes ? its not mpls setup

[jackolantern66666]

I need that my PC on my Vlan1 network will stays a permanent ip leases from the DHCP server. and not changing their IP addresses every couple of hours or boot.

[Mark Malone]

You would exclude your ip address from the local pool you set up then so its always has the same ip , statically give it to the pc then , you would do the same for servers and printers too

ip dhcp excluded-address 10.115.10.1 10.115.10.25

!
ip dhcp pool LAB_POOL1
   network 10.115.10.0 255.255.255.0
   domain-name TESTLAB.LOCAL
   dns-server 10.115.18.6 10.115.18.7
   netbios-name-server 10.115.18.4 10.115.18.5
   default-router 10.115.10.1
   lease 7

[jackolantern66666]

and another thing please, when i try to reach the web interface the GUI dashboard it is stucked on

http://"vlan1 address" or "Gi0 address"/flash:ccpexp/html/frames.html?feature=dhcpDns

after i pressing on one of the icons.(dhcp, dns, cli, statick route etc.)

i v change the browser to IE and CHROME the same problem there and there.

instead of seeing it: (see the first attachment)

i see this(second attachment).

[jackolantern66666]

I need to do it also to the local Vlan1 network and not only to the 132.50.x.x Gi0 Wan network. right now i can connect ssh using public network. i need also to do ssh to my vlan1 network 10.10.x.x.

[Mark Malone]

If you want to ssh from a public ip address back into a private ip address you will need to do some form of NAT , the public will need to translate back into the private address with port 22

your router needs to know when you ssh to your 132 ip address that he translates back to the 10 range through ssh

why do you need to ssh to a private ip address from the public internet , why not just ssh to the public ip address get access to the router and then ssh again into the private ip ?

[jackolantern66666]

is it possible to make a ssh to a private network after i had connected to the public network?(how to make a NAT?)

why give an static ip addresses to my PCs and not giving them an eternal lease from the DHCP service that configured on the Router?