IP NAT Service lists

[cat6506]

Greetings,

I'm using a 2600 router and trying to ftp to a natted address using a non-standard port number.

I referenced cisco's article,

http://www.cisco.com/en/US/customer/tech/tk648/tk361/technologies_tech_note09186a0080094e76.shtml

with the config. nearly identical to its example.
Yet, I still cannont establish an ftp connection.

Anyone ever nat an address and ftp on a different tcp port using the service list command???

Thanks,

Here's the config.

interface FastEthernet0/0
ip address 10.10.10.1 255.255.255.0
no ip proxy-arp
ip nat outside
duplex auto
speed auto
no cdp enable
!
interface FastEthernet0/1
ip address 192.168.1.1 255.255.255.0
ip nat inside
duplex auto
speed auto
!
ip nat log translations syslog
ip nat translation tcp-timeout never
ip nat translation port-timeout tcp 8002 never
ip nat service list ftp_local ftp tcp port 8002
ip nat service list ftp_local ftp tcp port 21
ip nat inside source list 101 interface FastEthernet0/0 overload
ip nat inside source static tcp 192.168.1.200 8002 interface FastEthernet0/0 8002
ip nat inside source static tcp 192.168.1.200 3389 interface FastEthernet0/0 3389
ip classless
!
!
ip access-list extended ftp_local
permit ip any host 192.168.1.200
!
access-list 101 permit ip 192.168.1.0 0.0.0.255 any

 

[gconnect]

ip nat service list ftp_local ftp tcp port 8002
ip nat service list ftp_local ftp tcp port 21

and

ip access-list extended ftp_local
permit ip any host 192.168.1.200


change to

ip nat service list 12 ftp tcp port 8002
ip nat service list 12 ftp tcp port 21
access-list 12 permit 192.168.1.200

FYI
those that do not have a CCO account will not be able to get to that page