Mi date una mano please.Un'altra cosa che non va e che dovrebbe essere correlata è la necessita di ruotare su ip interni determinate porte, e anche sull'altro router lo faccio cosi':
ip nat inside source static tcp 192.168.1.110 21 88.XX.XX.169 21 extendable
Ma qua non funziona
Allego configurazione:
Codice: Seleziona tutto
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname router
!
boot-start-marker
boot-end-marker
!
logging exception 100000
logging count
logging message-counter syslog
logging userinfo
logging queue-limit 10000
logging buffered 150000 informational
logging console notifications
enable secret 5 *****
enable password 7 ****
!
no aaa new-model
clock summer-time MEDT recurring last Sun Mar 2:00 last Sun Oct 3:00
ip source-route
no ip gratuitous-arps
ip icmp rate-limit unreachable 1000
!
!
!
!
no ip cef
ip domain name itv.local
ip name-server 8.8.8.8
ip name-server 208.67.220.220
multilink bundle-name authenticated
!
!
username root password 7 011A0B015A0F0F59
username guido password 7 050C13062543
archive
log config
hidekeys
!
!
!
!
!
interface Loopback0
ip address 88.XX.XX.214 255.255.255.252
!
interface FastEthernet0/0
description Interfaccia rete locale
ip address 192.168.1.251 255.255.255.0
no ip proxy-arp
ip nat inside
ip virtual-reassembly
no ip route-cache
duplex auto
speed auto
no cdp enable
no mop enabled
hold-queue 100 out
!
interface FastEthernet0/1
no ip address
no ip route-cache
shutdown
duplex auto
speed auto
!
interface Serial0/1/0
description ALICE IMPRESA HDSL 2Mbps
bandwidth 2048
no ip address
no ip unreachables
no ip proxy-arp
ip accounting access-violations
encapsulation frame-relay
no ip route-cache
no ip mroute-cache
load-interval 30
no fair-queue
frame-relay traffic-shaping
frame-relay lmi-type ansi
!
interface Serial0/1/0.1 point-to-point
description PUNTO-PUNTO HDSL
bandwidth 2048
ip address 88.XX.XX.169 255.255.255.248
[color=#FF0000] ip access-group 105 in[/color][color=#4040FF]Se inserisco l'access list nella configurazione non navigo +[/color]
no ip unreachables
no ip proxy-arp
ip accounting access-violations
ip nat outside
ip virtual-reassembly
no ip route-cache
no ip mroute-cache
snmp trap link-status
no cdp enable
no arp frame-relay
frame-relay class CIR1024
frame-relay interface-dlci 257 IETF
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Serial0/1/0.1
!
!
ip http server
ip nat pool natpool 88.XX.XX.169 88.XX.XX.169 netmask 255.255.255.248
ip nat inside source list 102 interface Serial0/1/0.1 overload
ip nat inside source static tcp 192.168.1.110 21 88.XX.X.169 21 extendable
ip nat inside source static tcp 192.168.1.119 1720 88.XX.XX.169 1720 extendable
ip nat inside source static udp 192.168.1.119 1720 88.XX.XX.169 1720 extendable
......
altri ip nat inside
!
!
map-class frame-relay CIR1024
access-list 11 permit 89.XX.XX.154
access-list 11 permit 213.XX.XX.10
..... altri ip singoli
access-list 11 permit 192.168.1.0 0.0.0.255
access-list 11 permit any
access-list 101 permit ip 192.168.1.0 0.0.0.255 any
access-list 101 permit icmp 192.168.0.0 0.0.0.255 any
access-list 101 deny ip any any log
access-list 102 permit ip 192.168.1.0 0.0.0.255 any
access-list 105 deny ip 224.0.0.0 15.255.255.255 any
access-list 105 deny ip 240.0.0.0 15.255.255.255 any
access-list 105 deny ip 0.0.0.0 0.255.255.255 any
access-list 105 deny ip 169.254.0.0 0.0.255.255 any
access-list 105 deny ip 127.0.0.0 0.255.255.255 any
access-list 105 permit tcp any any eq ftp-data
access-list 105 permit tcp any any eq ftp
access-list 105 permit tcp host 95.xx.xx.189 host 88.35.136.169 eq 8090
access-list 105 permit udp host 95.xx.xx.189 host 88.35.136.169 eq 8090
access-list 105 permit tcp any host 88.xx.xx.169 eq 7008
access-list 105 permit udp any host 88.xx.xx.169 eq 7008
access-list 105 permit tcp any host 88.xx.xx.169 eq 8080
access-list 105 permit udp any host 88.xX.xx.169 eq 8080
access-list 105 deny ip any any log
snmp-server community public RO
no cdp run
!
!
control-plane
!
banner motd ^C
* * * * * * * * * * * * W A R N I N G * * * * * * * * * * * * * * * * * * * *
THIS SYSTEM IS RESTRICTED TO AUTHORIZED USERS FOR AUTHORIZED USE
ONLY. UNAUTHORIZED ACCESS IS STRICTLY PROHIBITED AND MAY BE
PUNISHABLE UNDER THE COMPUTER FRAUD AND ABUSE ACT OF 1986 OR
OTHER APPLICABLE LAWS. IF NOT AUTHORIZED TO ACCESS THIS SYSTEM,
DISCONNECT NOW. BY CONTINUING, YOU CONSENT TO YOUR KEYSTROKES
AND DATA CONTENT BEING MONITORED. ALL PERSONS ARE HEREBY
NOTIFIED THAT THE USE OF THIS SYSTEM CONSTITUTES CONSENT TO
MONITORING AND AUDITING.
* * * * * * * * * * * * W A R N I N G * * * * * * * * * * * * * * * * * * * *
^C
!
line con 0
exec-timeout 120 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
access-class 11 in
exec-timeout 0 0
password 7 ***
login
!
scheduler max-task-time 5000
scheduler allocate 20000 1000
end
Mi riuscite ad aiutare?
grazie
