Ho un quesito abbastanza banale, uso un dns dinamico: dyndns.
Nella rete interna gira un serverino web.
Se dalla rete interna digito l'indirizzo ip del server ... il server risponde con le sue paginette e fino a qui tutto ok...
Se carico il sito da un computer esterno alla mia rete accedendo al sito attraverso l'host dinamico anche loro riescono a vedere tutto senza problemi...
IL PROBLEMA subentra nel momento in cui io dalla mia rete interna voglia accedere al sito usando l'hostname del dns dinamico.
Da cosa può dipendere ?
La porta 80 è stata correttamente forwardata (altrimenti dall'esterno non si vedrebbe nulla).
Allego sh run
Codice: Seleziona tutto
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname cisco877
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable password 7 110418061611045D5D727C
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication login ciscocp_vpn_xauth_ml_1 local
aaa authorization exec default local
aaa authorization network ciscocp_vpn_group_ml_1 local
!
!
aaa session-id common
clock timezone PCTime 1
clock summer-time PCTime date Mar 30 2003 2:00 Oct 26 2003 3:00
!
crypto pki trustpoint TP-self-signed-810093270
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-810093270
revocation-check none
rsakeypair TP-self-signed-810093270
!
!
crypto pki certificate chain TP-self-signed-810093270
certificate self-signed 03
3082023E 308201A7 A0030201 02020103 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 38313030 39333237 30301E17 0D313031 30323632 31333233
315A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3831 30303933
32373030 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
B58D6D09 F77AF974 B45228AA CB8946D1 E5795AEE 7B4BBEC6 C0C3E9C9 E99E3B69
CC636C85 0FFB7BC8 3612FA60 4F67D3F6 7EE93A38 19481BC2 0D76C595 4CE2EF67
404A5CCF 584A7F33 CF56700F 604780A7 FF3684A2 81C9862A BE0B549A 80281D97
7155CA8A AD60038B A68495A4 D716F5E8 5D84B8AD D47D4AB4 574B8853 9F742F05
02030100 01A36830 66300F06 03551D13 0101FF04 05300301 01FF3013 0603551D
11040C30 0A820863 6973636F 38373730 1F060355 1D230418 30168014 13113A8F
06E58D98 5C62A2D5 391ACBA7 1F9A30DC 301D0603 551D0E04 16041413 113A8F06
E58D985C 62A2D539 1ACBA71F 9A30DC30 0D06092A 864886F7 0D010104 05000381
81001A28 E4ECFAF7 1AE9B741 5C4636B3 48ACD90E 5C9A7AC6 AB1BAD44 9F95B022
CEFD0C43 F66F2161 B4052EFE 18448E79 C468A3CC 1A8FF00E 40525D01 426788D6
5D6F1CEB 27E27992 DF15BB90 E958038E E90ECA05 7CDCDE82 1A1C3576 F70FB7F4
1948C896 E176709E EA5F1520 9C57CA70 8E12C50A 522255C3 F52B09A2 DA159704 5936
quit
dot11 syslog
ip source-route
!
!
ip dhcp excluded-address 192.168.1.1 192.168.1.199
ip dhcp excluded-address 192.168.1.251 192.168.1.254
!
ip dhcp pool LOCAL
import all
network 192.168.1.0 255.255.255.0
dns-server 208.67.222.222 208.67.220.220
default-router 192.168.1.1
lease 0 0 8
!
!
ip cef
ip name-server 208.67.222.222
ip name-server 208.67.220.220
ip ddns update method dyndns
HTTP
add http://USERNAME:PASSWORD@<s>/nic/update?system=dyndns&hostname=<h>&myip=<a>
interval maximum 28 0 0 0
!
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
username admin password 7 CARATTERI_CARATTERI_CARATTERI
username root privilege 15 password 7 CARATTERI_CARATTERI_CARATTERI
!
!
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
!
crypto isakmp client configuration group outlander
key 1234567890
pool SDM_POOL_1
acl 100
max-users 10
crypto isakmp profile ciscocp-ike-profile-1
match identity group outlander
client authentication list ciscocp_vpn_xauth_ml_1
isakmp authorization list ciscocp_vpn_group_ml_1
client configuration address respond
virtual-template 1
!
!
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
!
crypto ipsec profile CiscoCP_Profile1
set transform-set ESP-3DES-SHA
set isakmp-profile ciscocp-ike-profile-1
!
!
archive
log config
hidekeys
!
!
!
class-map match-any rtpclass
match dscp 5
match protocol rtp
match protocol rtcp
class-map match-any p2pclass
match protocol bittorrent
match protocol directconnect
match protocol edonkey
match protocol fasttrack
match protocol gnutella
match protocol kazaa2
match protocol winmx
class-map match-any sip
match protocol sip
!
!
policy-map CCP-QoS-Policy-1
class p2pclass
bandwidth percent 10
random-detect
class sip
priority percent 20
class rtpclass
priority percent 40
class class-default
fair-queue
random-detect
!
!
!
!
interface ATM0
no ip address
no atm ilmi-keepalive
!
interface ATM0.1 point-to-point
pvc 8/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Virtual-Template1 type tunnel
ip unnumbered Dialer0
tunnel mode ipsec ipv4
tunnel protection ipsec profile CiscoCP_Profile1
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1452
!
interface Dialer0
ip ddns update hostname NOME.HOSTNAME.COM
ip ddns update dyndns host members.dyndns.org
ip address negotiated
ip mtu 1492
ip nbar protocol-discovery
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname HOSTNAME
ppp chap password 7 PASS
ppp pap sent-username USER password 7 PASS
ppp ipcp route default
service-policy output CCP-QoS-Policy-1
!
ip local pool SDM_POOL_1 192.168.50.1 192.168.50.10
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
ip dns server
ip dns spoofing
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 192.168.1.88 80 interface Dialer0 80
ip nat inside source static tcp 192.168.1.233 21 interface Dialer0 21
ip nat inside source static tcp 192.168.1.30 444 interface Dialer0 444
ip nat inside source static tcp 192.168.1.25 43256 interface Dialer0 43256
ip nat inside source static tcp 192.168.1.243 8080 interface Dialer0 8080
ip nat inside source static tcp 192.168.1.60 5900 interface Dialer0 5900
ip nat inside source static tcp 192.168.1.86 8765 interface Dialer0 8765
ip nat inside source static tcp 192.168.1.60 48166 interface Dialer0 48166
ip nat inside source static tcp 192.168.1.88 22 interface Dialer0 22
!
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark CCP_ACL Category=2
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 100 remark CCP_ACL Category=4
access-list 100 permit ip 192.168.1.0 0.0.0.255 any
dialer-list 1 protocol ip permit
!
!
!
!
!
control-plane
!
!
line con 0
password 7 011E07075A08095E781419
no modem enable
line aux 0
line vty 0 4
!
scheduler max-task-time 5000
end
