Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations SkipVought on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

NAT configured - cannot access inside network from the outside network

Status
Not open for further replies.

theciscokid

IS-IT--Management
Apr 27, 2001
2
0
0
US
I am having a problem. I have NAT configured on my inside network that is functioning properly. The problem is that I want to gain file sharing access to about 10 machines on the inside network from the outside. But NAT seems to block all the machines from the outside trying to get in.

Does anyone know what can be done to get around this problem? Any help would be appreciated. My config is posted below:

Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname MegaRoute3
!
enable password ******
!
ip subnet-zero
no ip domain-lookup
!
interface Ethernet0/0
description connected to EthernetLAN
ip address 10.12.1.254 255.255.0.0
no ip directed-broadcast
ip nat inside
!
interface Serial0/0
description connected to MegaRoute2
ip address 10.11.1.253 255.255.255.248
no ip directed-broadcast
ip nat inside
no ip mroute-cache
!
interface Ethernet0/1
description connected to Internet & Corporate Network
ip address 155.229.80.61 255.255.252.0
no ip directed-broadcast
ip nat outside
!
interface Serial0/1
no ip address
no ip directed-broadcast
ip nat inside
shutdown
!
router rip
version 2
passive-interface Ethernet0/1
network 10.0.0.0
network 155.229.0.0
!
ip nat inside source list 1 interface Ethernet0/1 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Ethernet0/1
no ip http server
!
access-list 1 permit 10.12.0.0 0.0.255.255
access-list 1 permit 10.11.1.248 0.0.0.7
access-list 1 permit 10.10.0.0 0.0.255.255
access-list 1 permit 10.15.1.252 0.0.0.3
snmp-server engineID local 0000000902000003E39FE880
snmp-server community public RO
!
line con 0
exec-timeout 0 0
password ******
login
transport input none
line aux 0
line vty 0 4
password ******
login
!
no scheduler allocate
end
 
You need to give static mappings in NAT which directs NAT to go to a specific IP with a specific port request. This is commonly done to allow web traffic to pass through NAT while still keeping the IP "private" "Diplomacy; the art of saying 'nice doggie' till you can find a rock" Wynn Catlin
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top