-1
votes
1answer
55 views

can anyone show me how can i fix error with my NAT config

Can anyone help me with my packet tracer problem? My network 2 buildings (each building has 3 vlans) on the same side and it has 2 sides, between is internet. I finish with DHCP and now I try to ...
0
votes
0answers
12 views

Cisco ASA Access anyconnect from inside IPsec tunnel

I have a Cisco ASA on a dynamic WAN IP with a IPsec site-to-site tunnel to a remote linux host in a datacenter with a static WAN IP. All non local traffic is tunneled and the datacenter end is the ...
0
votes
0answers
26 views

Cisco ASA 5505: PAT / NAT between 2 IPSec Tunnels

I've the following Setup: Customer <-> HQ <-> Branchoffice The Customer has a 192.168.1.0/24 subnet. On the HQ only the VPN Gateway is in my context, 172.20.10.1 . And on the Branchoffice ...
0
votes
1answer
52 views

Port Forwarding on Cisco Router

I'm a Cisco newbie, have the 1841, with two ethernet interfaces: interface FastEthernet0/0: Internal Desired destination IP: 186.67.181.140 interface FastEthernet0/1: External World IP ...
0
votes
0answers
46 views

Cisco router: expired translations not timing out

Why would a Cisco router stop removing expired translations from the NAT table? For example: #show ip nat translations tcp verbose tcp <loopback>:60576 <inside>:60576 ...
0
votes
1answer
62 views

Cisco 887VA Port Forwarding Not Working

I have a Cisco 887VA connected to our BT Business Broadband line. We also have another modem on a seperate connection which also handles our DHCP. The Cisco is plugged into our network switch, as is ...
0
votes
0answers
33 views

Is there an optimal NAT configuration in Cisco IOS for peer to peer applications?

The Cisco router in my organisation is set up to use Port Address Translation (PAT) for Internet connectivity. ie All outbound internet connections are from the ip address or the border Cisco ...
0
votes
1answer
52 views

CISCO: conditional port-based NAT (policy-based PAT)?

I have a problem to nat-translate inbound http packets to different local_ips based on some condition (like dscp bits set). Actually the dscp bits get set on the incoming trafic using NBAR. I hope ...
0
votes
0answers
21 views

Is it possible to hairpin on Cisco 851W IOS 12.4(15)T9 and how?

I need machines on the LAN to be able to access by the external address or hostname. If it can't be done, then just by hostname is OK as well, so I thought of just doing it through DNS on our internal ...
0
votes
0answers
31 views

Cisco IOS log packets dropped due to no NAT entries?

I use access list logging currently, and update the access list to match the NAT table, and then the access-list deny any any log command is used for logging packets that were not allowed. However, I ...
0
votes
1answer
55 views

Cisco ASA 5510 nat

In my infrastructure, I natted a server on a Public IP address. Please note, the server is reachable from any outside network. My access rules are good. My isssue is from the internal network, I'm ...
0
votes
1answer
91 views

Configure atftp server to reply on port 69

Problem : I'm facing to a problem with TFTP server and Cisco 79XX IP phones. When on a local network, everything is working fine, but when the TFTP server is on a public server (and phones inside a ...
0
votes
1answer
2k views

Cisco ASA 5505 - NAT or Port Forward for SIP / VoIP ver 8.4

I just had an NEC PBX installed that lets me use SIP trunks for VoIP services, My gateway is a Cisco ASA 5505 running 8.4 and I only have one public/static IP Addresses. So far, my trunks are ...
-1
votes
1answer
52 views

Cisco ASA 5505: Created a faulty NAT rule. Can't reach the ASA

I was trying to create a NAT rule to reach my internal web server from inside the LAN. Something must have gone wrong. Now when i try to reach the ASA through https://192.168.1.1 the response is from ...
0
votes
0answers
36 views

CISCO IOS Forward (nat) specific IP to other IP and Port

I've a customer that has a CISCO 7604 as a Border Router.. (Within Network uses Mikrotik, Freeradius, Meraki, etc)... I'm trying (newbie with Cisco) to create a Forward Rule (in Mikrotik is a Nat ...
2
votes
1answer
317 views

Dual ISP Inbound NAT — Asymmetric routing

routing question here. In a dual ISP scenario is there way to use both external IPs and nat them to a web server in a higher security level? The issue I am running into is on the return path for ...
4
votes
1answer
877 views

How do you NAT Hairpin in IOS 8.3+

As I asked here and duplicated here it appears NAT Hairpinning is the answer I'm looking for to allow internal servers to loopback through the ASA to access external IP's (without using DNS ...
0
votes
2answers
213 views

Cisco ASA/PIX Can't Access Internal Resources Behind NAT [duplicate]

My servers are natted 1:1 as follows, i.i.i.i maps to x.x.x.x where i is an internal IP, and x is the external IP. From an i.i.i.i machine, I cannot access x.x.x.x resources... What special ...
0
votes
0answers
142 views

Cisco ASA, Windows Server 08, PPTP/GRE issues

I am at the end of my rope on this one. I am trying to simply forward pptp/gre through a Cisco ASA to my Windows server. Here is what I have done: Access Rules: OUTSIDE ...
0
votes
2answers
146 views

NAT Overloading not working, access-list not catching ips?

I have a GNS3 lab set up and I am trying to get NAT overloading working with a dynamic pool. Please see diagram The issue I am having is traffic is being routed correctly from PC1 to the ISP1 or ...
0
votes
0answers
195 views

Are my NAT rules in ASA 8.6 correct

I am working on converting some PIX rules to ASA 8.6 syntax. Do the following achieve the goal? Assumptions: outside's IP address is 66.66.66.5/29 The outside IP address I want things translated ...
0
votes
1answer
73 views

Natting / Port forwarding in cisco FWSM

I have requirement to PAT two different public IP [same port] to single load balancer local IP [VIP] in different ports using a Cisco FWSM. Ex: static(LB,outside) 10.0.0.1 www 192.168.100.1 8282 ...
2
votes
2answers
62 views

Cisco Network Object NAT to get Internet?

So I've inherited a Cisco ASA 5505, and I have no experience whatsoever with the things! There are two Network Interfaces both WAN facing, and the LAN interface of course. Now in NAT rules, there are ...
0
votes
0answers
437 views

Cisco 1921 - Using NAT (NVI method) between VRF's slow performance

I'm setting up a Cisco 1921 with two VRF's: one to the internet and one to the LAN. The LAN is in private address space so source address translation needs to happen when the packets leave the ...
0
votes
2answers
648 views

Cisco ASA-5505 Port Forwarding

I have a Cisco ASA-5505 firewall, which is currently configured to share our internet connection and do NAT for my LAN, as well as forward port 443 to an internal machine. I need to forward port 2222 ...
4
votes
2answers
860 views

NAT routing and port forwarding on Cisco ASA 5505

I have inherited my first Cisco router and am having trouble understanding how to do NAT port forwarding correctly. ASA: 8.0.2 ASDM: 6.1(1) I have a single external ip address on the outside (via ...
1
vote
1answer
24 views

destinantion-based NAT cisco routers

On a Cisco Router I need to translate "NAT" the LAN IP of some PCs based on the destination e.g. Connecting to 172.16.0.0 /24 Transalte to 172.16.0.100 Connecting to 0.0.0.0 0.0.0.0 Translate to ...
6
votes
1answer
255 views

How do I configure NAT rules when using ASA IP-SLA when leveraging post-ASA-8.3 NAT syntax?

We are currently running ASA9 at a location with redundant ip connectivity. We'd love to configure ip sla so that internet access survives a single carrier outage. I'm aware of the ip sla commands, ...
0
votes
2answers
576 views

cisco ip nat / port forwarding

I have been trying to get port forwarding working with a newly installed cisco router. I cannot seem to find where my fault is and have been looking for quite a while. The relevant section of my ...
0
votes
1answer
390 views

IOS Port Forwarding and NAT involving a VPN

We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 8.2 at our headquarters. The network looks something like this: ...
0
votes
3answers
188 views

IOS Nated port forwarding

I have cisco ios router with ios C1900 Software (C1900-UNIVERSALK9-M), Version 15.2(4)M1. And I have setup Nat with port overload (one public IP). And there is a static mapping: ip nat source static ...
3
votes
1answer
572 views

Dual Cisco Router Stateful Firewall

At my company we have a single Cisco 3925sec/k9 router running BGP with 2 ISPs. Now we want to purchase a redundant router of the same model to eliminate a single point of failure. I can set up BGP ...
0
votes
3answers
132 views

Cisco 2900 configuration

I agreed to help a non-profit figure out their network woes. Nothing had been documented and the folks that set the system up aren't available. Wires were cut and left hanging. The organization has ...
1
vote
1answer
1k views

Cisco ASA 5520 Unable to access external IP on Internal Network

I have an internal network of 192.168.0.x and I have a server nat'd to an external IP address we have. I can't figure out how I need to change my configuration for this thing to get it to work. I'm ...
0
votes
2answers
228 views

ASA 5505 outside access for clients with dynamically assigned IPs, no outside access for clients with static IPs

We have an ASA configured to access the internet, which works fine for clients who have an IP address assigned by DHCP, but not for clients with manually assigned IPs. For instance, with the DHCP ...
3
votes
1answer
535 views

Site to site VPN between Cisco VPN Router and Sonicwall NAT issues

I'm trying to establish a site-to-site VPN connection from office to datacenter. Cisco RV042G and SonicWall NSA2400 In the office; we have the subnet 10.0.0.0/24 defined and hosts from 10.0.0.150 to ...
1
vote
1answer
353 views

Cisco ASA Redirect all traffic from specific outside hosts to specific inside host

I've got a new PBX that I've setup and i will be using a 3rd party sip provider, they've gone ahead and given me an outside number an now i need to allow traffic from 3 different hosts to be able to ...
1
vote
3answers
968 views

Trying to setup NAT from 2 outside IPs to the same private IP

Cisco ASA 5510 I currently have a NAT for SMTP on one outside IP to an internal IP. I need to setup 2 external IPs to NAT to the same IP internally. How can I do that? ex: 10.10.10.1 25 --> ...
0
votes
0answers
535 views

Cisco 881 losing NAT NVI translation config after reload

This is a weird one, so I'll try to explain in as much detail as I can so I'm giving the whole picture. As I've mentioned in my other questions, I'm in the process of setting up a new Cisco 881 as my ...
0
votes
2answers
837 views

Unable to PPTP through NAT on Cisco 881

I'm trying to connect to a PPTP server which is sat behind a Cisco 881 NAT router. The server is running Ubuntu Server 12.04 and is running Poptop pptpd as the PPTP daemon listening for connections. ...
3
votes
2answers
4k views

Inbound SIP calls through Cisco 881 NAT hang up after a few seconds

I've recently moved to a Cisco 881 router for my WAN link. I was previously using a Cisco Linksys WAG320N as my modem/router/WiFi AP/NAT firewall. The WAG320N is now running in bridged mode, so it's ...
-1
votes
1answer
190 views

any consumer router supports change source and destination IP at the same time?

For the purposes of PCI-DSS compliance, I have been asked to see if there's a small consumer router/etc that can accept a packet from one network segment, and change the destination IP address (from ...
1
vote
1answer
543 views

Cisco ip nat overload algorithm

I have a cisco 7206 vxr with 15.0 ios(c7200p-adventerprisek9-mz.151-3.S0a.bin) .I configured the overloaded nat there. some of confs: ip nat pool nat a.b.c.2 a.b.c.254 netmask 255.255.255.0 ip nat ...
0
votes
1answer
67 views

Restrict Incoming Static NAT Connections by Source IP

I need to allow connections to several hosts inside my network from a trusted third party. Currently this is achieved with static NAT entries for each server which is proving to be a security ...
1
vote
0answers
483 views

Cisco 1841 - Configuration Issue with NAT

We recently dug out an old Cisco 1841 to solve a need and have been in the process of trying to configure it appropriately. Admittedly, this is my first escapade into the land of Cisco Routing. I've ...
1
vote
1answer
60 views

Does IOS 12.4 Basic have the “ip nat pool …” available

Could someone with Cisco IOS 12.4 Basic check to see if the command "ip nat pool" is available? We have 12.2 basic and I know it is in the 12.4 advanced version but our budget is very limited so I am ...
1
vote
2answers
369 views

NAT translation with Cisco ASA 5505

I am trying to setup NAT translation on a ASA 5505, however the new public IP address never actually becomes available after adding it. I'm sure I'm doing something stupid, but so far the problem has ...
3
votes
1answer
198 views

Can I enable NAT on a Cisco ASA without breaking connectivity?

Sorry for the noob question, I haven't done this in years... I have a Cisco ASA with a working VPN, which I set up like five years ago, and I would like to forward http through to an internal IP ...
0
votes
1answer
653 views

One To One NAT, only works on WAN?

We are attempting to test a One To One NAT configuration on a Cisco RV180 router, Cisco SMB support says that this setup below would not work. (they seem to be right) I know it has something to do ...
1
vote
1answer
137 views

NAT : understanding about interconnection

English version below J'ai 2 routeurs A et B relié en série avec les ip respectives ( 10.0.0.1/30 10.0.0.2/30) sur le routeur A j'ai activé la fonction NAT avec un pool (200.0.0.1 - 200.0.0.15/28). ...