Newsgroup: it.comp.reti.cisco
Titolo: nat - forward o cosa per www/http - cisco 800

Ciao a tutti, recentmente ho installato il servizo no-ip con un server web
interno; tutto bene solo che se digito 
http://www.niosito.no-ip.biz
 mi
appare : impossibile visualizzare la pagina pechè è il router adsl cisco 800
che mi risponde; dovrei fare quindi in modo che la richiesta che arriva al
router venga girata al server iis interno. non ho idea quali siano le
modifiche da fare sulla configurazione del mio cico; chi può e vuole
aiutarmi ?
Ciao Grazie
Donato

 modifiche da fare sulla configurazione del mio cico; 
ip nat inside source static tcp ip_server_web 80 interface DialerX 80
-- 
Alessandro Pensato,
AreaNetworking Staff
ICT Documentation Repository
Cisco Users Group
web: 
http://cug.areanetworking.it
mail: 
alessandr...@areanetworking.it
personal web: 
http://www.alessandro-pensato.it
Neurona: 
http://alessandro-pensato.neurona.it
LinkedIn: 
http://www.linkedin.com/in/alepensato

 ha
scritto nel messaggio news:48c6108c$0$1071$4faf...@reader2.news.tin.it...

Ciao, tgi ringrazio del suggerimento però una riga simile è stata già
inserita da me per il server ftp ma sembra che non funzioni
:
************************************
ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 192.168.1.254 21 interface Dialer0 21
ip nat inside source static tcp 192.168.1.254 20 interface Dialer0 20
ip nat inside source static udp 192.168.1.18 4672 interface Dialer0 4672
ip nat inside source static tcp 192.168.1.18 4662 interface Dialer0 4662
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 150 permit tcp any any eq ftp
access-list 150 permit tcp any any eq ftp-data
no cdp run
*******************************************
cosa c'è di sbagliato ?
Ciao Grazie

 cosa c'è di sbagliato ?
In quella parte di configurazione nulla. Forse il problema è dovuto alla
presenza di ACL sulle interfacce ethernet0 e/o dialer0.


 ha
scritto nel messaggio news:48c6c5b7$0$18150$4faf...@reader3.news.tin.it...

Ciao, se vuoi posto tutta la configurzione : eccola
****************************************************************************
****
Current configuration : 4788 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname yourname
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
no aaa new-model
!
resource policy
!
ip cef
!
!
 --More--                           no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool sdm-pool
   import all
   network 192.168.1.0 255.255.255.0
   default-router 192.168.1.1
   lease 0 2
!
!
no ip domain lookup
ip domain name 
yourdomain.com
!
!
crypto pki trustpoint TP-self-signed-236431182
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-236431182
 revocation-check none
 rsakeypair TP-self-signed-236431182
!
!
crypto pki certificate chain TP-self-signed-236431182
 certificate self-signed 01
 --More--                             3082024D 308201B6 A0030201 02020101
300D0609 2A864886 F70D0101 04050030
  30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 32333634 33313138 32301E17 0D303230 33303130 30303534
  365A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
  532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3233 36343331
  31383230 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
  B87210D4 81927FC4 9F8ED685 8BA54160 6AF81EFF 05C53FA9 86C3ACA1 8A2933CE
  00087A42 632B3478 256155B4 65EFB565 21E987BB A2BDF6C8 6ED89303 087E480D
  BB3EA1B3 4547F7C0 4654D0EE 3B760BE5 B79CE3C4 335CDC2C 1EDA5584 EE7DEFC1
  3F31D0DF AFC90E1D 886755CD 842AF11D 8CCDF27E 5C0470D2 358D7C86 5D67EA29
  02030100 01A37730 75300F06 03551D13 0101FF04 05300301 01FF3022 0603551D
  11041B30 19821779 6F75726E 616D652E 796F7572 646F6D61 696E2E63 6F6D301F
  0603551D 23041830 16801438 F0DEC94B 70E44996 57E0528D B645059E C1124D30
  1D060355 1D0E0416 041438F0 DEC94B70 E4499657 E0528DB6 45059EC1 124D300D
  06092A86 4886F70D 01010405 00038181 00897379 BE2279CC CFD7664D 683D09B5
  BAAA27EF 64A79607 9A6660FA 4623E88F 4198F350 9651731E D479759F AFC73054
  6DDCD70E 9C23A7B7 5C43650C 66CA914E A9CE71B6 7DF6CBA9 EC338937 A413A0E0
  6A041F2D 4312F9A3 9739988B 3374AC4C 47E8E35F 07A55950 797C6E19 A68E4382
  8970C76D DF6DA4CF 3E5122B8 57DACEB8 B8
  quit
username cisco privilege 15 secret 5 $1$yBBk$EZnusqwGV5eB76P827AiT0
!
!
 --More--                           !
!
!
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
 pvc 8/35
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
 dsl operating-mode auto
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
 description non lo so
 --More--                            ip address 192.168.1.1 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat inside
 ip virtual-reassembly
 ip route-cache flow
 ip tcp adjust-mss 1452
!
interface Dialer0
 ip address negotiated
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 dialer pool 1
 no cdp enable
 ppp chap hostname pippo
 ppp chap password 0 pluto
 ppp pap sent-username pippo password 0 pluto
!
ip route 0.0.0.0 0.0.0.0 Dialer0
!
!
 --More--                           ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 192.168.1.254 21 interface Dialer0 21
ip nat inside source static tcp 192.168.1.254 20 interface Dialer0 20
ip nat inside source static udp 192.168.1.18 4672 interface Dialer0 4672
ip nat inside source static tcp 192.168.1.18 4662 interface Dialer0 4662
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 150 permit tcp any any eq ftp
access-list 150 permit tcp any any eq ftp-data
no cdp run
!
!
!
!
control-plane
!
banner login ^C
-----------------------------------------------------------------------
 --More--                           Cisco Router and Security Device Manager
(SDM) is installed on this device.
This feature requires the one-time use of the username "cisco"
with the password "cisco". The default username and password have a
privilege level of 15.
Please change these publicly known initial credentials using SDM or the IOS
CLI.
Here are the Cisco IOS commands.
username <myuser>  privilege 15 secret 0 <mypassword>
no username cisco
Replace <myuser> and <mypassword> with the username and password you want to
use.
For more information about SDM please follow the instructions in the QUICK
START
GUIDE for your router or go to 
http://www.cisco.com/go/sdm
-----------------------------------------------------------------------
^C
!
line con 0
 login local
 --More--                            no modem enable
line aux 0
line vty 0 4
 access-class 23 in
 privilege level 15
 login local
 transport input telnet ssh
!
scheduler max-task-time 5000
!
webvpn context Default_context
 ssl authenticate verify all
 !
 no inservice
!
end
yourname# ÿ
-----------------------------------------------------------------------
Cisco Router and Security Device Manager (SDM) is installed on this device.
This feature requires the one-time use of the username "cisco"
with the password "cisco". The default username and password have a
privilege level of 15.
Please change these publicly known initial credentials using SDM or the IOS
CLI.
Here are the Cisco IOS commands.
username <myuser>  privilege 15 secret 0 <mypassword>
no username cisco
Replace <myuser> and <mypassword> with the username and password you want to
use.
For more information about SDM please follow the instructions in the QUICK
START
GUIDE for your router or go to 
http://www.cisco.com/go/sdm
-----------------------------------------------------------------------
User Access Verification
Username:
Username: cisco
Password:
yourname#show run
Building configuration...
Current configuration : 4788 bytes
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname yourname
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
!
no aaa new-model
!
resource policy
!
ip cef
!
!
 --More--                           no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool sdm-pool
   import all
   network 192.168.1.0 255.255.255.0
   default-router 192.168.1.1
   lease 0 2
!
!
no ip domain lookup
ip domain name 
yourdomain.com
!
!
crypto pki trustpoint TP-self-signed-236431182
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-236431182
 revocation-check none
 rsakeypair TP-self-signed-236431182
!
!
crypto pki certificate chain TP-self-signed-236431182
 certificate self-signed 01
 --More--                             3082024D 308201B6 A0030201 02020101
300D0609 2A864886 F70D0101 04050030
  30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 32333634 33313138 32301E17 0D303230 33303130 30303534
  365A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
  532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3233 36343331
  31383230 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
  B87210D4 81927FC4 9F8ED685 8BA54160 6AF81EFF 05C53FA9 86C3ACA1 8A2933CE
  00087A42 632B3478 256155B4 65EFB565 21E987BB A2BDF6C8 6ED89303 087E480D
  BB3EA1B3 4547F7C0 4654D0EE 3B760BE5 B79CE3C4 335CDC2C 1EDA5584 EE7DEFC1
  3F31D0DF AFC90E1D 886755CD 842AF11D 8CCDF27E 5C0470D2 358D7C86 5D67EA29
  02030100 01A37730 75300F06 03551D13 0101FF04 05300301 01FF3022 0603551D
  11041B30 19821779 6F75726E 616D652E 796F7572 646F6D61 696E2E63 6F6D301F
  0603551D 23041830 16801438 F0DEC94B 70E44996 57E0528D B645059E C1124D30
  1D060355 1D0E0416 041438F0 DEC94B70 E4499657 E0528DB6 45059EC1 124D300D
  06092A86 4886F70D 01010405 00038181 00897379 BE2279CC CFD7664D 683D09B5
  BAAA27EF 64A79607 9A6660FA 4623E88F 4198F350 9651731E D479759F AFC73054
  6DDCD70E 9C23A7B7 5C43650C 66CA914E A9CE71B6 7DF6CBA9 EC338937 A413A0E0
  6A041F2D 4312F9A3 9739988B 3374AC4C 47E8E35F 07A55950 797C6E19 A68E4382
  8970C76D DF6DA4CF 3E5122B8 57DACEB8 B8
  quit
username cisco privilege 15 secret 5 $1$yBBk$EZnusqwGV5eB76P827AiT0
!
!
 --More--                           !
!
!
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
 pvc 8/35
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
 dsl operating-mode auto
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
 description non lo so
 --More--                            ip address 192.168.1.1 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 ip nat inside
 ip virtual-reassembly
 ip route-cache flow
 ip tcp adjust-mss 1452
!
interface Dialer0
 ip address negotiated
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 dialer pool 1
 no cdp enable
 ppp chap hostname
 ppp chap password 0
 ppp pap sent-username password 0
!
ip route 0.0.0.0 0.0.0.0 Dialer0
!
!
 --More--                           ip http server
ip http access-class 23
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 192.168.1.254 21 interface Dialer0 21
ip nat inside source static tcp 192.168.1.254 20 interface Dialer0 20
ip nat inside source static udp 192.168.1.18 4672 interface Dialer0 4672
ip nat inside source static tcp 192.168.1.18 4662 interface Dialer0 4662
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 150 permit tcp any any eq ftp
access-list 150 permit tcp any any eq ftp-data
no cdp run
!
!
!
!
control-plane
!
banner login ^C
-----------------------------------------------------------------------
 --More-- ÿ
-----------------------------------------------------------------------
Cisco Router and Security Device Manager (SDM) is installed on this device.
This feature requires the one-time use of the username "cisco"
with the password "cisco". The default username and password have a
privilege level of 15.
Please change these publicly known initial credentials using SDM or the IOS
CLI.
Here are the Cisco IOS commands.
username <myuser>  privilege 15 secret 0 <mypassword>
no username cisco
Replace <myuser> and <mypassword> with the username and password you want to
use.
For more information about SDM please follow the instructions in the QUICK
START
GUIDE for your router or go to 
http://www.cisco.com/go/sdm
------------------------------------------------------------
buttaglia una guardata e mi dici gentilemente cosa non è esatto ?
Ciao grazie
Donato

 access-list 150 permit tcp any any eq ftp-data
Non vedo applicata in nessun punto questa ACL, quindi potresti anche
eliminarla.
Vedendo il resto della configurazione non mi sembra ci sia qualcosa di
errato come ACL che bloccano il traffico. Mi viene da pensare se il
server FTP e HTTP abbiano impostato correttamente il gateway.


 ha
scritto nel messaggio news:48c6e57b$0$1084$4faf...@reader2.news.tin.it...

Ciao Alessandro, le configurazione ip gateway ed altro sono esatte; non so
cosa fare; dimmi hai qualche idea ?
Ciao Grazie
Donato

access-list 1 permit 192.168.1.0 0.0.0.255
io non vedo la parte del nat della porta 80
una volta inserita devi provare  il funzionamento esclusivamente
dall'esterno della tua lan altrimenti il tuo server web non lo vedrai
mai.
ciao Max