WWW Server behind easy-IP and NAT 1

[Firewall999]

I've got a small LAN on 192.168.x.y behind a 1600 with firewall IOS using an ISDN2 dial on demand to my ISP with easy IP and dynamic NAT to the WAN IP address. Outbound access works fine and I can get my address posted to dyndns.org to enable me to find the IP address on the 'net, however Configmaker tells me I can't allow inbound http as I'm using NAT. I'm sure an IOS firewall can do better than win2k and ICS but I'm not sure how.

How do I map my internal

http://WWW server

to the WAN IP address?

 

[Firewall999]

Additional to the above,

I've added an access list,

access-list 101 permit tcp any host 192.168.0.2 eq www

to allow the inbound connection. The problem appears to be a lack of a static NAT mapping inbound.

 

[espIKEkid]

Yup you need to add a static nat..

ip nat outside source static INSIDE OUTSIDE

or

ip nat inside source static tcp INSIDE_EMAIL 25 OUTSIDE 25

Enjoy!!

 

[Firewall999]

Can't do that with a dynamic IP address on the dialer as I never know what OUTSIDE is.

 

[espIKEkid]

mmmm.. how do you plan to point dns to your web server if you never know what ip address its going to be?

I know there are sites that give you dynamic dns for use with cable modems etc.

 

[Firewall999]

dyndns.org and a program called DirectUpdate from

http://www.directupdate.net

takes care of all that. Just can't believe Cisco can't do what Microsloth can.