Cisco 800 Series : NAT Issue

[oliver1349]

Hello,

I'm encountering an issue with my NAT configuration.
at least once a week, my web sites become unvailable, port 80 is not accessible anymore from the internet.

That's the only unavailable port, pop-smtp-TS-ftp are still available.

The workaround I found so far is :

Remove NAT for port 80
no ip nat inside source static tcp 10.10.10.2 80 interface ATM0.1 80

Add NAT for port 80
ip nat inside source static tcp 10.10.10.2 80 interface ATM0.1 80

Any advise/idea to troubleshoot that issue?

Thanks,

Olivier

 

[lambent]

When you find that it's not working:

1) check the NAT translation by typing "show ip nat translation" and search for the port 80 translation. Check if it's doing the translation accordingly.

2) check if you can access the web server from the internal network 10.10.10.x

 

[oliver1349]

Ok, will try those actions next time it crashes.

Olivier

 

[lambent]

If you have enable logging, check with the log messages.

 

[oliver1349]

I've no idea on how to enable logging
We got that box with no information...
We just know it is supposed to work but have no experience is high level networking stuff.

Olivier

 

[mrn]

It maybe your NAT's are not timing out try adding

ip nat translation timeout 900
ip nat translation tcp-timeout 900

I had the same problem last week, do you have a problem getting onto the router when this happens?

Mike

"A foolproof method for sculpting an elephant: first, get a huge block of marble, then you chip away everything that doesn't look like an elephant."

http://www.airport-parking-site.co.uk/

 

[oliver1349]

I have no problem getting onto the router.
Other ports are working well so I have an access to it.

Olivier

 

[oliver1349]

It crashed again today.
As advised, timeouts were set.

- Web sites are available from the localhost.
- shop ip nat translation shows there is no NAT on port 80
- The line in the running config is "ip nat inside source static tcp 10.10.10.2 80 interface atm0.1 80". If I try to remove that line, I get a message "static entry is in use, cannot remove" while there is no natting on port 80...

Any advise?

Thanks,

Olivier