Newsgroup: it.comp.reti.cisco
Titolo: server ftp soho 97

Salve a tutti,
sono nuovo dei router cisco e conosco poco i comandi e la logica di
IOS, qualcuno potrebbe indicarmi una guida da seguire o darmi i
comandi per configurare il router soho 97 affinchè un server ftp
presente nella lan sia accessibile dall'esterno?
Seguendo i messaggi sul ng ho provato a modificare il nat e le acl ma
senza buoni risultati: il server continua a non essere visibile.
Ciao e grazie,
Luigi



posta la conf e vediamo
ciao m.

 ciao m.
Ciao, grazie per la disponibilità.
DI seguito c'è il risultato di una show running
admin#show running
Building configuration...
Current configuration : 4007 bytes
!
version 12.4
no service pad
service timestamps debug datetime
msec
service timestamps log datetime
msec
no service passwor
!
hostname admin
!
boot-start-marker
boot-end-marker
!
no logging buffered
enable secret 5 $1$Gfpq$dKmp2R3c7sm0TZ0/
qK9iO/
!
no aaa new-model
!
resource policy
!
no ip dhcp use vrf connected
ip dhcp excluded-address
192.168.1.1
ip dhcp excluded-address
192.168.1.3
ip dhcp excluded-address
192.168.1.4
ip dhcp excluded-address
192.168.1.5
ip dhcp excluded-address 192.168.1.1
192.168.1.5
ip dhcp excluded-address
192.168.1.2
!
ip dhcp pool CLIENT
   network 192.168.1.0
255.255.255.0
   default-router 192.168.1.1
   dns-server 208.67.222.222
208.67.220.220
   netbios-name-server 192.168.1.2
192.168.1.2
   domain-name xxxxxxxxxxxxxx
   lease 0 2
!
!
ip cef
ip name-server 208.67.222.222
ip name-server 208.67.220.220
ip inspect name myfw cuseeme timeout
3600
ip inspect name myfw ftp timeout
3600
ip inspect name myfw rcmd timeout
3600
ip inspect name myfw realaudio timeout
3600
ip inspect name myfw smtp timeout
3600
ip inspect name myfw tftp timeout
30
ip inspect name myfw udp timeout 15
ip inspect name myfw tcp timeo
ip inspect name myfw h323 timeout
3600
!
!
!
username admin password 0xxxxxxx
username CRWS_Srini privilege 15 password 0 $1$W1fA
$o1oSEpa681255834
username CRWS_Venky privilege 15 password 0 $1$W1fA
$o1oSEpa1102234012
username CRWS_Ulags privilege 15 password 0 $1$W1fA
$o1oSEpa98251372
username CRWS_Jaidil privilege 15 password 0 $1$W1fA
$o1oSEpa71467622
username CRWS_Sangeetha privilege 15 password 0 $1$W1fA
$o1oSEpa566749269
username CRWS_Kannan privilege 15 password 0 $1$W1fA
$o1oSEpa1660360245
username CRWS_dheeraj privilege 15 password 0 $1$W1fA
$o1oSEpa873109890
!
!
!
!
!
interface Ethernet0
 ip address 192.168.1.1
255.255.255.0
 ip nat inside
 no ip mroute-cache
 hold-queue 100 out
!
interface ATM0
 no ip address
 no ip mroute-cache
 atm vc-per-vp 64
 no atm ilmi-keepalive
 dsl operating-mode auto
 hold-queue 224 in
 pvc 8/35
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
!
interface Dialer1
 ip address negotiated
 ip access-group 111 in
 ip nat outside
 ip inspect myfw out
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 ppp authentication chap pap callin
 ppp chap hostname xxxxxx
 ppp chap password 0 xxxxx
 ppp pap sent-username xxxxx password 0
xxxxxx
 hold-queue 224 in
!
ip route 0.0.0.0 0.0.0.0 Dialer1
ip http server
no ip http secure-server
!
ip nat inside source list 102 interface Dialer1
overload
ip nat inside source static tcp 192.168.1.2 21 interface Dialer1
21
ip nat inside source static tcp 192.168.1.2 20 interface Dialer1
20
!
access-list 23 permit 192.168.1.0
0.0.0.255
access-list 100 permit tcp any host 192.168.1.2 eq
ftp
access-list 102 permit ip 192.168.1.0 0.0.0.255
any
access-list 111 permit tcp any any eq
ftp
access-list 111 permit tcp any any eq ftp-
data
access-list 111 permit icmp any any administratively-
prohibited
access-list 111 permit icmp any any
echo
access-list 111 permit icmp any any echo-
reply
access-list 111 permit icmp any any packet-too-
big
access-list 111 permit icmp any any time-
exceeded
access-list 111 permit icmp any any
traceroute
access-list 111 permit icmp any any
unreachable
access-list 111 permit udp any eq bootps any eq
bootpc
access-list 111 permit udp any eq bootps any eq
bootps
access-list 111 permit udp any eq domain
any
access-list 111 permit esp any any
access-list 111 permit udp any any eq
isakmp
access-list 111 permit udp any any eq
10000
access-list 111 permit tcp any any eq 1723
access-list 111 permit tcp any any eq 139
access-list 111 permit udp any any eq netbios-ns
access-list 111 permit udp any any eq netbios-dgm
access-list 111 permit gre any any
access-list 111 deny   ip any any
dialer-list 1 protocol ip permit
!
control-plane
!
!
line con 0
 no modem enable
line aux 0
line vty 0 4
 access-class 23 in
 exec-timeout 120 0
 login local
 length 0
!
scheduler max-task-time 5000
end
il server ftp dovrebbe essere installato sulla macchina 192.168.1.2
Ciao e grazie,
Luigi