I am having a problem setting up my Cisco 1601 router with NAT. I used the IP nat inside source static 192.168.XXX.XXX 205.XXX.XXX.XXX command but still am unable to connect to my Exchange server from the outside. I need to be able to have people use the SMTP feature along with IMAP4 features of our 2000 server. I am extremely new to Cisco so I'm not sure what could be wrong with my setup.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Cisco 1600 and Nat 2
- Thread starter darenw
- Start date
-
1
- #2
Configure the following command under the Serial interface:
ip nat outside
Configure the following command under the LAN interface:
ip nat inside
If you want to see if the translation is working in real time, type the following when you try and attempt a connection:
term mon
debug ip nat
<remember to type undebug all to turn debug off again>
You can also type:
show ip nat trans verbose
to get an idea that your address has been translated.
ip nat outside
Configure the following command under the LAN interface:
ip nat inside
If you want to see if the translation is working in real time, type the following when you try and attempt a connection:
term mon
debug ip nat
<remember to type undebug all to turn debug off again>
You can also type:
show ip nat trans verbose
to get an idea that your address has been translated.
-
1
- #3
Here would be a sample NAT config.
interface Ethernet0
ip address 192.168.X.X 255.255.255.X
ip nat inside
!
interface Ethernet1
ip address 205.X.X.X 255.255.255.X
ip nat outside
!
ip nat inside source list 5 interface Ethernet1 overload
ip nat inside source static 192.168.1.X 205.X.X.X
ip nat inside source static tcp 192.168.1.X 25 205.X.X.X 25 extendable
!
access-list 5 permit 192.168.X.X 255.255.255.X
IP TO IP works with the IP IOS
IP/Port to IP/Port Works with IP Plus IOS
if you only have IP put an access list in place to restrict unwanted traffic, otherwise you are leaveing your server swinging in a huricane.
interface Ethernet0
ip address 192.168.X.X 255.255.255.X
ip nat inside
!
interface Ethernet1
ip address 205.X.X.X 255.255.255.X
ip nat outside
!
ip nat inside source list 5 interface Ethernet1 overload
ip nat inside source static 192.168.1.X 205.X.X.X
ip nat inside source static tcp 192.168.1.X 25 205.X.X.X 25 extendable
!
access-list 5 permit 192.168.X.X 255.255.255.X
IP TO IP works with the IP IOS
IP/Port to IP/Port Works with IP Plus IOS
if you only have IP put an access list in place to restrict unwanted traffic, otherwise you are leaveing your server swinging in a huricane.
- Status
