Cisco Switching/Routing :: 1841 - Static NAT
Sep 2, 2012
I have a Cisco 1841 router at home with version 12.4(13r)T advanced ip services. The setup is extremely simple:
1) PPPOE dialer to my service provider over ADSL
2) Nat overload on the dialer interface.
3) 2 V LAN s one for home network (wired) and one for wireless both v LAN's are connected through interface v LAN s respectively.
My problem is when I configure static NAT to map RDP or any other protocol to inside hosts this does n`t work.
"
ip nat source static tcp 192.168.20.3 2222 interface Dialer1 2222
ip nat source static tcp 192.168.20.3 3389 xx.xx.xx.xx 3389 extendable
ip nat inside source list 20 interface Dialer1 overload
"
When I open wire shark and sniff the traffic on home computer which is the one I`m trying to reach I can't see any traffic. And While performing Nat debugging I am also not able to see traffic going to that port (for example 3389).
View 7 Replies
ADVERTISEMENT
Jan 5, 2013
I guess i am just getting old and forgot how this works, or i have an IOS load with an undocumented feature in it.A customer of ours wishes to have their exchange server appear to the outside world on a seperate IP address as their public pool address is.in the past this has not been an issue, however in the current configuration we are unable to get the source address to appear per the NAT statement it always sources on the overloaded IP. below is the relevant NAT config, am i missing something, or have i hit a IOS feature? [code] There is a 45% chance i have forgotten everything i learned on the NOC desk and a 50% chance that it is somethine really stupid and 5% IOS is broken
View 5 Replies
View Related
Sep 12, 2012
We upgrade our Internet service in our India office which required a new router. The local vendor suggested an 1841, so that is what we have. It has two fastethernet ports on it.
The ISP (Airtel) provided the following IP address information:
Public WAN IP : 122.181.23.200/30
WAN IP : 122.181.23.202SUBNET MASK : 255.255.255.252GATEWAY : 122.181.23.201Pri DNS : 125.22.47.125Sec DNS : 202.56.250.5
[Code]......
View 5 Replies
View Related
Mar 16, 2013
establishing a Static NAT on an 1841 router.
I'm at a FOX affiliate TV station, and in order to connect our EAS Device to the internet & Fox Splicer, I need to setup a Statio NAT, so we picked up an 1841 on eBay.
I've done a little configuration in HyperTerminal.
I've done these ip addresses:
FE0/0 10.1.10.13 this is the subnet our EAS device is on
FE0/1 10.110.81.174 this is the subnet of the Fox Splicer.
I need to have NAT translate 10.1.10.11 to 10.110.81.170 and I also need to set a route for 10.110.81.0/24 pointing to 10.110.81.161
View 12 Replies
View Related
Mar 21, 2013
I have configured Cisco 1841 router PAT buts its not worked, find the below configuration details,
In LAN interface
Interface gigabit Ethernet 0/0
no shutdown
[code]......
Similarly I have configured static and dynamic nat but its not works in my customer place.
View 18 Replies
View Related
Feb 21, 2012
VPN 1841, and static nat. I have to create VPN to connect to remote network, but problem is that they already use same subnet as mine. How to configure static nat on cisco 1841 so static nat will work and address will be translated in different IP when connection trough VPN.I have address 192.168.235.1 and I want to translate to 192.168.100.1,This 1841 is border router, and all VLNAs and VLANs routing is on 3650.
View 12 Replies
View Related
Mar 14, 2011
I have configured a L2L VPN on a Cisco 1841 ISR. I am statically NATing some of my internal hosts to IP addresses that are included in the encrypted traffic. Please note that not all of the internal hosts are being NATed. I am doing this to hid some of the real IP addresses on the inside network. I have confirmed that the VPN works, as well as the NATing of the VPN traffic. I have traditionally configured L2L VPNs on Cisco ASA 5500 series appliances, and this is my first attempt with the 1841 ISR. I just want other to take a look a see if I missed anything, or, could I have done some of the configuration more efficiently. All comments are welcome.
VPN-RTR-01#show runBuilding configuration...
Current configuration : 9316 bytes!version 12.4service timestamps debug datetime msecservice timestamps log datetime msecservice password-encryption!hostname VPN-RTR-01!boot-start-markerboot-end-marker!! card type command needed for slot/vwic-slot 0/0logging buffered 51200 warningsno logging consoleenable secret 5 xxxxxxxxxxxxxxxenable password 7 xxxxxxxxxxxxxxx!no aaa new-modelip cef!!!!no ip domain lookupip auth-proxy max-nodata-conns 3ip admission max-nodata-conns 3!!crypto pki trustpoint TP-self-signed-2010810276 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-2010810276 revocation-check none rsakeypair TP-self-signed-
[code]....
View 1 Replies
View Related
Feb 20, 2012
I have a Cisco 1841 with a DSL and 3G HWIC interface. I would like to setup the DSL as the primary link and then use the 3G as a backup interface. I am trying to accomplish this using the Floating Static routes with SLA object tracking.
I have tried various options, like having two tracked routes, one tracked route, changing administrative distances, multiple SLA's, etc etc.
My problem basically is that when the DSL (Dialer0) goes down and the 3G (Cellular0/1/0) takes over, that the SLA never changes back when the DSL is available again, so that the DSL can take over as the primary link again. [code]
View 3 Replies
View Related
Feb 6, 2012
I'm just getting started with cisco kit so you will have to bare with me.I have a cisco 1841.i have a very wierd issue of routing...i cannot ping and browse through this.
View 3 Replies
View Related
May 31, 2013
I have a problem accessing my wireless router through VLAN sub-interface on my Cisco 1841 router. My hardware:
Cisco Catalyst 2960 switch (192.168.100.4 /24)
Cisco Catalyst 3550 switch (192.168.100.6 /24)
Cisco 1841 router (192.168.100.7 /24)
Asus RT N66U wireless router (192.168.100.2 /24)
Here's my network topology:
I have two VLANs - 10 and 20. 2 DHCP pools are configured on 2 1841's interfaces - 192.168.1.0 /25 and 192.168.1.128/26 with default router sitting on 192.168.1.1 and 192.168.1.129 respectively. No issues with obtaining IP address from any of those pools.Laptop connects to L3 3550 switch (switchport access vlan 10), which, in turn, connects to 1841 router through trunk (with VLANs 10 and 20 allowed).3550 is connected to 2960 through trunk with VLANs 10 and 20 allowed.Wireless router is connected to 2960.I can successfully ping my wireless router and outside world from 1841 from fa0/1 interface, but not from fa0/1.10 or fa0/1.20 sub-interfaces - all packets got dropped. My laptop can obtain IP from both pools (depending on port I connect it to), but can't ping my wireless router and anything beyond it.
I attach my configs:Cisco Catalyst 3550:interface FastEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk switchport port-security mac-address sticky speed 100!interface FastEthernet0/2 switchport trunk encapsulation dot1q switchport mode trunk!interface FastEthernet0/3 switchport access vlan 10 switchport mode access!interface FastEthernet0/4 switchport access vlan 20 switchport mode access!Cisco 1841:
ip dhcp pool Vlan10DHCP network 192.168.1.0 255.255.255.128 default-router 192.168.1.1 dns-server 208.67.220.220 domain-name home.local
!ip dhcp pool Vlan20DHCP network 192.168.1.128 255.255.255.192 default-router 192.168.1.129 dns-server 208.67.220.220 lease 0 12
interface FastEthernet0/1 ip address 192.168.100.7 255.255.255.0 duplex auto speed auto!interface FastEthernet0/1.10 description VLAN10 Sub Interface encapsulation dot1Q 10 ip address 192.168.1.1 255.255.255.128!interface FastEthernet0/1.20 description VLAN20 Sub Interface encapsulation dot1Q 20 ip address 192.168.1.129 255.255.255.192!
Routing table on 1841:
[code]....
View 19 Replies
View Related
Sep 19, 2011
I am having some trouble configuring dual NAT on a Cisco 1841.
The 1841 has three interfaces.
Fa0/0 - LAN
Fa0/1- Different private network
Fa0/1/0 - Connection to DSL modem
NAT overloading is configured on Fa0/1 and we have traffic that must be router there. We would like to have all internet access go through the DSL modem. Currently internet access is obtained through fa0/1 but is not ideal. I have floating static routes configured if the DSL link goes down. (Which is currently unplugged) I do not have physical access to the router at this moment. We would like to keep the config a simple as possible. It seems like route-maps may be one of our only options.
View 1 Replies
View Related
Oct 3, 2011
I have a 1841 router attached to 2 ISP's. Each ISPs provides different bandwithd. I want to do load balance between them, but I want to do some sort of weighted load blance, so as to assign more traffic to one ISP than the other. A kind of 70/30 (70% of traffic via ISP1, and 30% of traffic via ISP2).Is there a way to acomplish that? I already tried creating bogus /32 routes, but "cef" seems to be more clever and groups the bogus routes as one gw.
View 12 Replies
View Related
Aug 4, 2009
Basically I have an internet router (1841ISR) with 1 internal (LAN) connection and 2 internet connections. What I want to do is route specific traffic for 3 of my internally hosted services (smtp, https, etc) through one internet connection (fa0/0) and then route all other traffic through the unmanaged/dynamic IP ADSL connection (Dialer 0).
View 9 Replies
View Related
Dec 27, 2012
I have a stack of 2 x 3750X switches these are running 12.2(55)SE5. I needed to add some static IP routes and found that the ‘ip routing’ command is not supported. I came across a document that stated “On switches running the LAN base feature, static routing on VLANs is supported only with Cisco IOS Release 12.2(58)SE and later.” So I have upgraded to 12.2(58)SE2, but ‘ip routing’ is still not a valid command.
The release notes state:“On the Cisco Catalyst 3560-X and 3750-X Series, it adds support for 16 static IPv4 routes in the LAN Base image.”
I have read other posts that talk about running the ‘sdm prefer routing’ command which I have done, but I am still unable to add any routes or run the ‘ip routing’ command.
View 4 Replies
View Related
May 28, 2013
Two Cisco C2960G Switches connected with each other using an EtherChannel Trunk Ports.IOS Image has been upgraded to c2960-lanbasek9-mz. 122- 58.SE2.bin.The global command "sdm prefer lanbase-routing" has been executed to set the default template to "lanbase-routing".The global command "ip routing" has been executed to enable the ip routing.An IP route has been configured in each switch to point to each other for the static routing purpose (Please see the 2 attached configuration files) The hosts in VLAN 111 and VLAN 110 are not able to see each other even the ip static routes have been configured.May be I have misconfigured some settings but not sure what's the actual problem.
View 11 Replies
View Related
Nov 16, 2011
I've got an 1841 router and am using NAT to expose certain IPs and ports to the outside world so that external users can see internal resources (namely, web sites). However, I can't seem to get it running such that I can visit the external IP address from inside the network and get the router to turn the request around so that it is redirected back inside the network. Shouldn't this be possible? Our previous router (a non-Cisco) was able to do this, but I can't seem to get the new one to do it.
A couple of key config lines:
interface FastEthernet0/0
ip address a.b.c.178 255.255.255.240
[Code].....
View 1 Replies
View Related
Dec 3, 2011
asa 5505 is on head office.is it possible to configure it as a router from headoffice to branches 1,2 and internet [code]
View 7 Replies
View Related
Apr 9, 2013
I tried to connect a 1841 to a Linksys with a static route. I am able to ping from a computer in the 1841 to a computer in the linksys network, but I can't ping from a computer in the Linksys network to a computer in the 1841 network?
View 7 Replies
View Related
May 2, 2012
I want to SSH into a Cisco 1841 router and depending on the suffix added to the SSH (i.e ssh myrouter.myroute.com 2002), would like it to forward this request to a terminal server.Can this be done? If so, how does one accomplish this? I have done something similar with RDP but I was not sure about SSH.
View 3 Replies
View Related
Oct 28, 2012
What is the command to shutdown a cisco 1841 (say, to add a module)? I know how to reload / reboot, but does not seem to find any command with an obvious name.
View 1 Replies
View Related
Jan 19, 2013
I have an 1841 running Advanced Enterprise Services 12.4(22)T3 that is functioning as a DHCP server and DNS server. What I am trying to figure out how to do is have the DNS service respond to queries about the clients of the dhcp service. I have successfully enabled it as a caching server for other requests, like "google.com" and "cisco.com", but what about the hosts on the local LAN?
As an example, let's say a Windows computer connects to the network with the hostname "computer" and receives an IP address from the 1841 with the domain name "test.net". I would like the 1841 to serve DNS queries for "computer.test.net" with the IP address that it assigned.
View 7 Replies
View Related
Mar 7, 2012
We have a Cisco 1841 router that requires 2 levels of access, at the moment we have network admins logging in with a single username via SSH and with privilege 15 but we also need our helpdesk to login to run certain commands but not chaneg anything
View 4 Replies
View Related
Jan 3, 2013
we've to configure our router 1841 to use both 2 interface Fe for two different vlan (also the second has to go on internet).
Actually we have int Fe0/0 configured with an ip address 192.168.1.1 for lan1 192.168.1.0/24 and we will use the second int Fe0/1 with another ip address like 192.168.2.1 for lan2 192.168.2.0/24.
see below configuration:
[code]...
View 5 Replies
View Related
Oct 7, 2012
I've never had a router's CPU suddenly hit 99% and just stay like it for hours even after a reboot. This router really does nothing with regards to CPU, I'm looking at it's CPU history (via SolarWinds Orion NPM software that we use) and it is arounf 1-3% all the time for the past 2 years.
I did a show debugigng and it seems no debugging is running
View 9 Replies
View Related
Dec 28, 2011
what is the latest firmware for cisco 1841 ? is firmware and router IOS image are same ?
View 1 Replies
View Related
Jun 5, 2012
We currently have a Cisco 1841 router with version 12.4(1c) of IOS using image c1841-ipbase-mz.124-1c.bin. Our goal is to make it so our router can fully support IPv6. The current IOS version cannot. I've seen a site that seems to indicate 12.4T does support with IP Base image but recently had Cisco tell me with the latest IOS release 15.1.4.M4 that I have to use either the "Advanced Enterprise Services" or "Advanced IP Services" image. Did Cisco just remove IPv6 from IPBase in later IOS releases?
Also I've seen conflicting specs on the max amount of Flash and DRAM the router can support. The following link shows that 384MB is the max for DRAM and 128MB max for flash. We're looking to upgrade ours from 128MB and 32MB respectively but as mentioned I've seen it where higher amounts are supported. In fact we bought a backup 1841 to have and it has a 256MB Flash card in it.URL
Last but not least. Where can I find a straightforward documention of this situation where we may have to upgrade our Flash and DRAM and then upgrading the IOS?
View 3 Replies
View Related
Jan 18, 2012
I have a cisco 1841 running on a 10Mbps Metro-E connection. I recently signed an agreement for a 100Mbps Metro-E. I am wondering if I will need to purchase a new router to support this new connection or will my 1841 be able to handle the traffic.
View 5 Replies
View Related
May 2, 2013
I am trying to config the following setup in the Cisco 1841. Able to ping the IPs of Vlan1(FE0/0/1), Vlan2 (FE0/0/1) and FE0/1 IPs from corresponding networks. But packets are not flowing to other side.
View 3 Replies
View Related
Jan 9, 2012
we are trying to configure 1841 with dual Internet connection with failover using track.
View 4 Replies
View Related
Jul 2, 2012
I decided recently to switch out our border router (1841 12.4 advsecurity) with a shiny new 1941 (15.2 SEC/K9) as the CPU upgrade was needed.The core below acts as a VPN end point to various other remote offices we have, all of which have a similar network design at each end (and all entirely managed by me). All of these are still running 1841's with 12.4 advsecurity on them as well. These are all GRE tunnels with ipsec procection on them (not crypto maps). [code]
Everything else works fine (NAT, route-maps etc), it's just these IPSEC/isakmp tunnels that are not playing ballIt's definitely not an ARP issue (all arps were cleared) and ICMP appears to work fine (ie, I can ping the remote tunnel's public IP endpoint from the core using the loopback for that tunnel as the source). I am suspecting it's something strange with the stateful firewall config, but I did try and apply ipsec and isakmp-msft to the ip inspect list, with no success.
View 1 Replies
View Related
Dec 26, 2011
I have 3725 router with internal CF and external slot for CF. I tried upgrading and ended up deleting the iOS version on the internal flash, and can not now put the iOS back!! I turned it off.... so there was no active iOS..
I have tried formatting the CF card on an 1841 but the 3725 won't read it. It is obviously stuck at ROMMON
What is the correct way to format a CF card so my 3725 will read it and I can get an iOS back on it!!
View 1 Replies
View Related
Jan 1, 2012
I need to know the Cisco 1841 Router FE Maximum Bandwidth Support and the Cisco 3825 Router GE Maximum Bandwidth Support. I cannot find this information in Cisco for these old devices.I would like to have the platform capability for all situation (only IP base, with QoS, with ACL, with encryption, etc.)
View 1 Replies
View Related
Oct 22, 2012
I have a Cisco 1841 router connected to a Cisco 2960 switch.Users behind the router can't access the internet but when someone is directly connected to the switch with his PC and uses the IP Address found on the WAN port of the router, he's able to go on to the internet. [code]
View 4 Replies
View Related
