827 ADSL Router - One-to-One Static NAT

[jhappy3]

Hello,

I want to set up a Cisco 827 ADSL router/modem (IOS v12.1) to act as a backup for the modem/router provided by my ISP (0rbitCom). My present Netopia router/modem is configured to run PPPoA, does DHCP and is configured to do one-to-one static NAT on a group of 5 public IP's given to me by my ISP. It maps each of my public IP's to a private static ip.

I'm starting from scratch. I have plenty of downloaded PDF files, and snippets of configuration code from the Cisco site and elsewhere. The code to configure the one-to-one static NAT is the hardest to understand - at least for me.

If you could share some code that would get me started, I'd sure appreciate it. Following are some more details about my present modem/router setup:

Local Address - WAN side = 216.229.1XX.001
Local Address - LAN side = 192.168.1.1
DHCP is enabled, leases start at 192.168.1.10 and end at .253 for one hour
Encapsulation = PPP over ATM
ATM Circuit: vcc = 1 VPI = 0 VCI = 32
Multiplexing = VC muxed
LCP Settings:
Authentication = PAP and/or CHAP
MRU = 1500
MagicNumber enabled
LCP Echo Requests enabled
IP mapping:
216.229.2XX.001 --> 192.168.1.3
216.229.2XX.002 --> 192.168.1.4 (web server)
216.229.2XX.003 --> 192.168.1.5
216.229.2XX.004 --> 192.168.1.6
216.229.2XX.005 --> 192.168.1.7

I just purchased the Cisco 827 and will soon get some more DRAM and Flash memory which will enable me to upgrade the IOS to v12.3.

Thanks for your help.

 

[burtsbees]

for .3, .5, .6 and .7, what ports would you like mapped? Assuming .4 is mapped to tcp port 80, then the script would be

router>en
router#conf t
router(config)#ip nat inside source static tcp 192.168.1.4 80 interface (whatever the outside interface is) 80

let's say the outside interface is di0 (dialer0)...

router(config)#ip nat inside source static tcp 192.168.1.4 80 interface di0 80

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[jhappy3]

My preference is not to do port forwarding on the Cisco 827, unless I have to. Of the five hosts, represented by the five static public ip's, three need port 80 traffic. One of the hosts, a web-enabled thermostat, needs port 80 and port 8085 traffic. Another host, a security camera, needs port 80, 9000, 9001 and 9005 traffic. Two of the hosts (including the web server) need to be reached via remote desktop.

I'd hoped to be able to send all the traffic that comes into the modem/router for each public ip onto the associated static private ip. The next stop, after the Cisco 827, is a TopLayer AppSwitch 3500 which will do the firewall work.