Newsgroup: it.comp.reti.cisco
Titolo: Ip nat inside porta 80

Salve ragazzi,
premesso che sono a diguino di router, vorrei sottoporvi il seguente
problema:
Ho la seguente impostazione, tra l'altro, sul router cisco 1721:
ip nat inside source static tcp 192.168.0.101 80 8X.XX.XXX.XXX 80
extendable
per abilitare la porta 80. L'ho impostata entrando con config t, ho
scritto in memoria la modifica con write mem. La porta 80 funge,
tuttavia ogni qualvolta va via la corrente non riesco più a lavorare
sulla porta in questione, nonostante nella configurazione del router vi
sia l'istruzione. Allora tolgo l'istruzione di cui sopra la riaggiungo,
salva e il tutto funge come prima.
Qualcuno ha suggerimenti per rendere stabile la configurazione?
Grazie

 wrote in message
news:1138630855....@o13g2000cwo.googlegroups.com...
Salve ragazzi,
premesso che sono a diguino di router, vorrei sottoporvi il seguente
problema:
Ho la seguente impostazione, tra l'altro, sul router cisco 1721:
ip nat inside source static tcp 192.168.0.101 80 8X.XX.XXX.XXX 80
extendable
----
Ciao
puoi postare la conf completa e l'output del comando show version?
Grazie
Ciao
Carlo

Ecco, ho tolto gli Ip per ovvie ragioni...
Current configuration : 3275 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname xxxxxxxx
!
enable secret 5 $1$1Ln3$hVU0NW27wQ820veDTiqir/
enable password secret
!
ip subnet-zero
!
!
ip domain-name 
191.it
ip name-server 151.99.229.225
!
ip ssh time-out 120
ip ssh authentication-retries 3
!
!
!
!
interface ATM0
 no ip address
 no ip mroute-cache
 no atm ilmi-keepalive
 bundle-enable
 dsl operating-mode auto
!
interface ATM0.1 point-to-point
 ip address XX.XX.XX.XX 255.255.255.0
 ip access-group 102 in
 ip nat outside
 no ip mroute-cache
 pvc 8/35
  ubr 128
  oam-pvc manage
  oam retry 5 5 1
  encapsulation aal5snap
 !
!
interface BRI0
 no ip address
 no ip mroute-cache
 shutdown
!
interface FastEthernet0
 ip address 192.168.0.1 255.255.255.0 secondary
 ip address 192.168.0.17 255.255.255.0
 ip nat inside
 no ip mroute-cache
 no keepalive
 speed auto
 half-duplex
 no cdp enable
!
ip nat inside source list 50 interface ATM0.1 overload
ip nat inside source static tcp 192.168.0.101 80 XX.XX.XX.XX 80
extendable
ip nat inside source static tcp 192.168.0.101 43856 XX.XX.XX.XX 43856
extendable
ip nat inside source static tcp 192.168.0.101 8476 XX.XX.XX.XX 8476
extendable
ip nat inside source static tcp 192.168.0.101 8475 XX.XX.XX.XX 8475
extendable
ip nat inside source static tcp 192.168.0.101 8474 XX.XX.XX.XX 8474
extendable
ip nat inside source static tcp 192.168.0.101 8473 XX.XX.XX.XX 8473
extendable
ip nat inside source static tcp 192.168.0.101 8472 XX.XX.XX.XX 8472
extendable
ip nat inside source static tcp 192.168.0.101 8471 XX.XX.XX.XX 8471
extendable
ip nat inside source static tcp 192.168.0.101 8470 XX.XX.XX.XX 8470
extendable
ip nat inside source static tcp 192.168.0.101 449 XX.XX.XX.XX 449
extendable
ip nat inside source static tcp 192.168.0.101 21 XX.XX.XX.XX 21
extendable
ip nat inside source static tcp 192.168.0.101 23 XX.XX.XX.XX 1023
extendable
ip nat inside source static tcp 192.168.0.100 5900 XX.XX.XX.XX 5900
extendable
ip nat inside source static tcp 192.168.0.101 8475 XX.XX.XX.XX 80
extendable
ip classless
ip route 0.0.0.0 0.0.0.0 XX.XX.XXX.254
ip route 192.168.50.0 255.255.255.0 192.168.0.2
no ip http server
ip pim bidir-enable
!
!
access-list 50 permit 192.168.0.0 0.0.0.255
access-list 102 permit ip host XX.XX.XX.XX host XX.XX.XX.XX
access-list 102 permit ip host XX.XX.XX.XX host XX.XX.XX.XX
access-list 102 permit tcp any host XX.XX.XX.XX eq ftp
access-list 102 permit tcp any host XX.XX.XX.XX eq www
access-list 102 deny   tcp any host XX.XX.XX.XX eq 449
access-list 102 deny   tcp any host XX.XX.XX.XX eq 1023
access-list 102 deny   tcp any host XX.XX.XX.XX eq 8470
access-list 102 deny   tcp any host XX.XX.XX.XX eq 8471
access-list 102 deny   tcp any host XX.XX.XX.XX eq 8472
access-list 102 deny   tcp any host XX.XX.XX.XX eq 8473
access-list 102 deny   tcp any host XX.XX.XX.XX eq 8474
access-list 102 deny   tcp any host XX.XX.XX.XX eq 8475
access-list 102 deny   tcp any host XX.XX.XX.XX eq 8476
access-list 102 deny   tcp any host XX.XX.XX.XX eq 5900
access-list 102 permit ip any any
!
snmp-server community public RO
!
line con 0
 exec-timeout 0 0
line aux 0
line vty 0 4
 password XXXXXXXX
 login
!
end
Comando Show Version
Cisco Internetwork Operating System Software
IOS (tm) C1700 Software (C1700-K9SY7-M), Version 12.2(4)YA6, EARLY
DEPLOYMENT RELEASE SOFTWARE (fc1)
Synched to technology version 12.2(5.4)T
TAC Support: 
http://www.cisco.com/tac
Copyright (c) 1986-2003 by cisco Systems, Inc.
Compiled Wed 23-Jul-03 16:52 by ealyon
Image text-base: 0x80008124, data-base: 0x80CAD500
ROM: System Bootstrap, Version 12.2(7r)XM1, RELEASE SOFTWARE (fc1)
ROM: C1700 Software (C1700-K9SY7-M), Version 12.2(4)YA6, EARLY
DEPLOYMENT RELEASE SOFTWARE (fc1)
xxxxxxxx uptime is 4 hours, 45 minutes
System returned to ROM by power-on
System image file is "flash:c1700-k9sy7-mz.122-4.YA6.bin"
cisco 1721 (MPC860P) processor (revision 0x100) with 44237K/4915K bytes
of memory.
Processor board ID FOC07121EEJ (1138794065), with hardware revision
0000
MPC860P processor: part number 5, mask 2
Bridging software.
X.25 software, Version 3.0.0.
Basic Rate ISDN software, Version 1.1.
1 FastEthernet/IEEE 802.3 interface(s)
1 ISDN Basic Rate interface(s)
1 ATM network interface(s)
32K bytes of non-volatile configuration memory.
16384K bytes of processor board System flash (Read/Write)
Configuration register is 0x2102

 extendable
Ciao
Nella tua conf ho notato queste 2 entry.....
il tuo server risponde ad entrambe le porte? (80 e 8745)
Se ne lasci una sola sta sicuro che ti funionerà sempre...
Devi solo decidere la porta sulla quale ascolta il tuo web server
Ciao
HTH
Carlo