I have an 828 router working nicely on a SHDSL 1.5/1.5 connection and providing NAT for browsing etc for a small LAN, and for that it seems to work fine. The problem arrises when I try publishing services with port forwarding.
Once I have enabled a port forward from the external dialer interface to an internal, the RAM seems to fill up with translation data and fragment to h3ll, and then everything malloc errors on me.
It's a basic (no extra RAM or Flash) 828, but I would have thought I'd be able to get some basic PAT rules working.
I've pasted a (slightly sanitized) config below. Can anyone spot any mayor errors? And is there anything I can add in to drop the memory errors. Mem errors look like;
-Process= "IP Input", ipl= 0, pid= 36
-Traceback= 80138AC4 8013AA64 8013419C 806AC9CC 806A2A84 806A35C0 8029CD94 8029D044 8029D1AC 8015DA38
03:12:34: %SYS-2-MALLOCFAIL: Memory allocation of 65536 bytes failed from 0x80134198, alignment 0
Pool: Processor Free: 108776 Cause: Memory fragmentation
Alternate Pool: None Free: 0 Cause: No Alternate pool
Current configuration : 1836 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname FNNCLIENTCODE
!
logging queue-limit 100
enable secret xxx
enable password xxx
!
clock timezone pst 10
ip subnet-zero
no ip domain lookup
!
!
no ip bootp server
!
!
interface Ethernet0
description LAN
ip address 192.168.5.2 255.255.255.0
ip nat inside
no keepalive
no cdp enable
!
interface ATM0
no ip address
loopback
no atm ilmi-keepalive
dsl equipment-type CPE
dsl operating-mode GSHDSL symmetric annex B
dsl linerate AUTO
dsl snr threshold 15
!
interface ATM0.1 point-to-point
description Internet Network
pvc 1/34
ubr 1536
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
interface Dialer1
description Internet Network
ip address negotiated
ip nat outside
encapsulation ppp
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname xxx
ppp chap password xxx
!
ip nat inside source list 11 interface Dialer1 overload
ip nat inside source static tcp 192.168.5.200 38654 interface Dialer1 38654
ip nat inside source static tcp 192.168.5.200 38653 interface Dialer1 38653
ip nat inside source static tcp 192.168.5.200 38652 interface Dialer1 38652
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
ip route 192.168.2.0 255.255.255.0 192.168.5.60 #second internal LAN
no ip http server
!
access-list 11 permit 192.168.5.0 0.0.0.255
dialer-list 1 protocol ip permit
no cdp run
!
line con 0
exec-timeout 0 0
stopbits 1
line vty 0 4
exec-timeout 0 0
password xxx
login
!
scheduler max-task-time 5000
!
end
