aiuto configurazione nat interno verso internet
Inviato: lun 18 ott , 2010 9:47 pm
Internet funziona,vorrei raggiungere dall'esterno il mio server ftp,web,ecc che punta alla lan interna 192.168.0.1
Come dovrei fare? ho provato diverse regole ma mi funziona sono in locale verso l'ip 192.168.0.10 e non verso internet...
Ecco la mia conf:
Current configuration : 2345 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot system flash c3725-advsecurityk9-mz.124-19b.bin
boot-end-marker
!
enable secret 5 $
!
no aaa new-model
ip cef
!
!
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
ip ddns update method dyndns
HTTP
add http://username:[email protected] ... h>&myip=<a>
interval maximum 0 2 0 0
interval minimum 0 2 0 0
!
vpdn enable
vpdn logging
vpdn logging local
!
!
!
ip ssh version 1
!
!
!
interface FastEthernet0/0
ip address 192.168.0.10 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
no ip mroute-cache
duplex auto
speed auto
no cdp enable
!
interface Serial0/0
no ip address
shutdown
clock rate 2000000
no cdp enable
!
interface FastEthernet0/1
description ADSL WAN Interface
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip tcp adjust-mss 1452
no ip mroute-cache
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 1
no cdp enable
!
interface Serial0/1
no ip address
shutdown
clock rate 2000000
no cdp enable
!
interface Dialer1
description ADSL WAN Dialer
mtu 1492
ip ddns update hostname mydyndns
ip ddns update dyndns
ip address negotiated
no ip unreachables
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip tcp adjust-mss 1452
no ip mroute-cache
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname aliceadsl@aliceadsl
ppp chap password 0 aliceadsl
ppp pap sent-username aliceadsl@aliceadsl password 0 aliceadsl
ppp ipcp dns request accept
ppp ipcp address accept
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
!
ip http server
no ip http secure-server
ip nat inside source list 10 interface Dialer1 overload
ip nat inside source static tcp 192.168.0.1 21 interface FastEthernet0/1 21
ip nat inside source static tcp 192.168.1.240 80 interface FastEthernet0/0 80
!
access-list 10 permit 10.10.10.0 0.0.0.255
access-list 10 permit 192.168.0.0 0.0.0.255
dialer-list 1 protocol ip permit
no cdp run
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
password
login
!
!
end
Come dovrei fare? ho provato diverse regole ma mi funziona sono in locale verso l'ip 192.168.0.10 e non verso internet...
Ecco la mia conf:
Current configuration : 2345 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot system flash c3725-advsecurityk9-mz.124-19b.bin
boot-end-marker
!
enable secret 5 $
!
no aaa new-model
ip cef
!
!
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
ip ddns update method dyndns
HTTP
add http://username:[email protected] ... h>&myip=<a>
interval maximum 0 2 0 0
interval minimum 0 2 0 0
!
vpdn enable
vpdn logging
vpdn logging local
!
!
!
ip ssh version 1
!
!
!
interface FastEthernet0/0
ip address 192.168.0.10 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
no ip mroute-cache
duplex auto
speed auto
no cdp enable
!
interface Serial0/0
no ip address
shutdown
clock rate 2000000
no cdp enable
!
interface FastEthernet0/1
description ADSL WAN Interface
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip tcp adjust-mss 1452
no ip mroute-cache
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 1
no cdp enable
!
interface Serial0/1
no ip address
shutdown
clock rate 2000000
no cdp enable
!
interface Dialer1
description ADSL WAN Dialer
mtu 1492
ip ddns update hostname mydyndns
ip ddns update dyndns
ip address negotiated
no ip unreachables
ip nat outside
ip virtual-reassembly
encapsulation ppp
ip tcp adjust-mss 1452
no ip mroute-cache
dialer pool 1
dialer-group 1
no cdp enable
ppp authentication chap callin
ppp chap hostname aliceadsl@aliceadsl
ppp chap password 0 aliceadsl
ppp pap sent-username aliceadsl@aliceadsl password 0 aliceadsl
ppp ipcp dns request accept
ppp ipcp address accept
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer1
!
ip http server
no ip http secure-server
ip nat inside source list 10 interface Dialer1 overload
ip nat inside source static tcp 192.168.0.1 21 interface FastEthernet0/1 21
ip nat inside source static tcp 192.168.1.240 80 interface FastEthernet0/0 80
!
access-list 10 permit 10.10.10.0 0.0.0.255
access-list 10 permit 192.168.0.0 0.0.0.255
dialer-list 1 protocol ip permit
no cdp run
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
password
login
!
!
end
