abilitare porte per ftp www ed emule

[donpal]

Ciao a tutti; ho un router cisco serie 800 - linea adsl ed avrei necessità di publicare un sito web abilitare un ftp interno ed abilitqre delle porte di emule. la configurazione è quella allegata ma sembra non funzionare in particolare per il web ed ftp. in cosa è sbagliata ?

configurazione :

*********************************

version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname yourname
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
no aaa new-model
!
resource policy
!
ip cef
!
!
--More-- no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool sdm-pool
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
lease 0 2
!
!
no ip domain lookup
ip domain name yourdomain.com
!
!
crypto pki trustpoint TP-self-signed-236431182
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-236431182
revocation-check none
rsakeypair TP-self-signed-236431182
!
!
crypto pki certificate chain TP-self-signed-236431182
certificate self-signed 01
--More-- 3082024D 308201B6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32333634 33313138 32301E17 0D303230 33303130 30303534
365A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3233 36343331
31383230 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
B87210D4 81927FC4 9F8ED685 8BA54160 6AF81EFF 05C53FA9 86C3ACA1 8A2933CE
00087A42 632B3478 256155B4 65EFB565 21E987BB A2BDF6C8 6ED89303 087E480D
BB3EA1B3 4547F7C0 4654D0EE 3B760BE5 B79CE3C4 335CDC2C 1EDA5584 EE7DEFC1
3F31D0DF AFC90E1D 886755CD 842AF11D 8CCDF27E 5C0470D2 358D7C86 5D67EA29
02030100 01A37730 75300F06 03551D13 0101FF04 05300301 01FF3022 0603551D
11041B30 19821779 6F75726E 616D652E 796F7572 646F6D61 696E2E63 6F6D301F
0603551D 23041830 16801438 F0DEC94B 70E44996 57E0528D B645059E C1124D30
1D060355 1D0E0416 041438F0 DEC94B70 E4499657 E0528DB6 45059EC1 124D300D
06092A86 4886F70D 01010405 00038181 00897379 BE2279CC CFD7664D 683D09B5
BAAA27EF 64A79607 9A6660FA 4623E88F 4198F350 9651731E D479759F AFC73054
6DDCD70E 9C23A7B7 5C43650C 66CA914E A9CE71B6 7DF6CBA9 EC338937 A413A0E0
6A041F2D 4312F9A3 9739988B 3374AC4C 47E8E35F 07A55950 797C6E19 A68E4382
8970C76D DF6DA4CF 3E5122B8 57DACEB8 B8
quit
username cisco privilege 15 secret 5 $1$yBBk$EZnusqwGV5eB76P827AiT0
!
!
--More-- !
!
!
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
dsl operating-mode auto
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
description non lo so
--More-- ip address 192.168.1.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1452
!
interface Dialer0
ip address negotiated
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
no cdp enable
ppp chap hostname
ppp chap password
ppp pap sent-username pippo password 0 pollo
!
ip route 0.0.0.0 0.0.0.0 Dialer0
!
!
--More-- ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 192.168.1.254 21 interface Dialer0 21
ip nat inside source static tcp 192.168.1.254 20 interface Dialer0 20
ip nat inside source static udp 192.168.1.18 4672 interface Dialer0 4672
ip nat inside source static tcp 192.168.1.18 4662 interface Dialer0 4662
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 150 permit tcp any any eq ftp
access-list 150 permit tcp any any eq ftp-data
no cdp run
!
!
!
!
control-plane
!
banner login ^C
-----------------------------------------------------------------------
--More-- Cisco Router and Security Device Manager (SDM) is installed on this device.
This feature requires the one-time use of the username "cisco"
with the password "cisco". The default username and password have a privilege level of 15.

Please change these publicly known initial credentials using SDM or the IOS CLI.
Here are the Cisco IOS commands.

username <myuser> privilege 15 secret 0 <mypassword>
no username cisco

Replace <myuser> and <mypassword> with the username and password you want to use.

For more information about SDM please follow the instructions in the QUICK START
GUIDE for your router or go to http://www.cisco.com/go/sdm
-----------------------------------------------------------------------
^C
!
line con 0
login local
--More-- no modem en

**************************

ciao grazie

Donato

[Helix]

Non ci sono voci per quanto riguarda il webserver sugli statements del NAT...e poi l'access list 115 dove è applicata?

[donpal]

Ciao, ti ringrazio del suggerimento relativo alla acl; ad ogni modo a questo punto ti volevo chiedere se mi potevi modificare la configurazione postata in modo tale che passi il servizo ftp web ed emule. Ciao Grazie
Donato

[Helix]

Metti

access-list 100 permit tcp any host 192.168.0.2 eq 4662
access-list 100 permit udp any host 192.168.0.2 eq 4672

e applicala alla dialer

ip access-group 100 in

non so se è giusta...facci sapere!