Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Can't telnet to cisco router from outside network. Inside works fine

Status
Not open for further replies.

ejeangilles

Technical User
Oct 22, 2004
35
US
Hello all!

I have aproblem that I'm just stuck on. I have a practice lab in my network with an access server. I have comcast and a linksys router as my firewall. I have been doing port forwarding for some time to access my computers such as rdp, ftp, etc so i'm familiar with it. I can't seem to telnet to my cisco router from the outside I have dyndns setup and its been working fine. I can't telnet wheher its by domain name or IP address. I opened ports 23 on my router and that doesn't work. I can telnet internally to my router just fine but not externally. This router has IOS 12.4 enterprise. Any help would be appreciated!!
 
Static NAT. Post a sh run from the router. Also, post a sh ver---with the right IOS, you really should set up ssh, and not telnet.

It should be straightforward---try a port scan to see if 23 is open, but like I said, I would just ssh (port 22). Telnet passes info all in cleartext, and ssh encrypts it (at least more secure, but still vulnerable).

Burt
 
I'm not using NAT on my cisco router its just a device on my network I'm trying to telnet to. Right now I prefer to get anyone setup even if it is telnet. Here's the info

r1#sh run
Building configuration...

Current configuration : 1028 bytes
!
version 12.4
service config
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname r1
!
boot-start-marker
boot-end-marker
!
enable password matrix
!
no aaa new-model
no network-clock-participate slot 1
no network-clock-participate wic 0
ip cef
!
!
!
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
!
!
interface FastEthernet0/0
ip address 192.168.1.151 255.255.255.0
ip broadcast-address 0.0.0.0
duplex auto
speed auto
!
interface Serial0/0
ip address 10.1.100.1 255.255.255.0
ip broadcast-address 0.0.0.0
!
interface FastEthernet0/1
no ip address
ip broadcast-address 0.0.0.0
shutdown
duplex auto
speed auto
!
interface Serial0/1
no ip address
ip broadcast-address 0.0.0.0
shutdown
!
ip forward-protocol nd
!
!
ip http server
no ip http secure-server
!

!
control-plane
!
!

line con 0
line aux 0
line vty 0 4
password matrix
login
transport input all
!
!
end

sh ver.....
Cisco IOS Software, C2600 Software (C2600-ADVENTERPRISEK9-M), Version 12.4(18), RELEASE SOFTWARE (fc1)
Technical Support: Copyright (c) 1986-2007 by Cisco Systems, Inc.
Compiled Fri 30-Nov-07 15:38 by prod_rel_team

ROM: System Bootstrap, Version 12.2(7r) [cmong 7r], RELEASE SOFTWARE (fc1)

r1 uptime is 8 minutes
System returned to ROM by reload
System image file is "flash:c2600-adventerprisek9-mz.124-18.bin"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco 2621XM (MPC860P) processor (revision 1.0) with 127308K/3764K bytes of memory.
Processor board ID JAE073419T8
M860 processor: part number 5, mask 2
2 FastEthernet interfaces
2 Serial interfaces
32K bytes of NVRAM.
32768K bytes of processor board System flash (Read/Write)

Configuration register is 0x2602
 
You need a default route.


ip route 0.0.0.0 0.0.0.0 192.168.1.x

Where x equals your default gateway
 
Dude! Your awesome...I set the the default route on my router just like you said and it worked right away. Thanks a lot !!!!
 
cough cough star cough cough

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top