Cisco Router configuration - help required

[HNawaz]

Dear All,

I have an issue trying to get our VC unit to register with a Polycom VC unit in Japan.

In the past we have never used or needed a gatekeeper, this is a new requirement, hence some adjustment on our routers.

The VC kit is in one of our sites in Cambridgeshire, the router connecting to japan is in a different site. All sites are running different subnets.

We are currently communicating with japan (head quarters) on the same network as the vc gatekeepr 10.x.x.x/8 which works fine.

I have added the the following on the cisco router to allow our VC to register with the Gatekeeper which is in Japan;

I created a secondary ip address on the external facing adapter with the ip address required for the VC on the interface connected to the router connecting to hq.

I have also added the following entries on the cisco router to allow virtual ip addresses to be used for our VC kits ;

ip nat inside source static (Gatekeeper registered IP Address) (private IP address on LAN)
ip nat inside source static (Gatekeeper registered IP Address) (private IP address on LAN)
ip nat outside source static (private LAN IP Address) (Gatekeeper registered IP Address)
ip nat outside source static (private LAN IP Address) (Gatekeeper registered IP Address)

ip nat source static udp (private LAN IP) 1719 interface FastEthernet0/0 1719
ip nat source static tcp (private LAN IP) 1720 interface FastEthernet0/0 1720

There is no deny acl's on the router as our internet connection is via a different router altogether.

Please advise.

Haq

 

[tphethai]

use the same protocol and same model, compare the configuration... it should be worked

 

[burtsbees]

1. your first two static NAT lines are backwards---first two lines you need the private ip first, then the public.
2. you shouldn't need outside static NATs, just the first two inside static NATs...the last two lines may confuse the poor router
3. the UDP 1721 lines need inside source specified

--Tim

ip access-list extended IP-Options-and-Powerball
deny ip any any winning-powerball-ticket
permit ip any any option any-options
!
class-map ACL-Options-and-Powerball
match access-group name IP-Options-and-Powerball
!
policy-map CoPP-POLICY
class ACL-Options-and-Powerball
drop
!
control-plane
service-policy input CoPP-POLICY