I am trying to allow a network printer to be accessed from the internet on a Cisco 837
Based on my configuration I would like to know the best way to setup access to a local network printer from the internet. The internal IP address of the printer is 192.168.9.70
Thanks in advance.
Config
Current configuration : 7571 bytes ! version 12.4 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname ALKO_Router ! boot-start-marker boot-end-marker ! logging buffered 51200 debugging no logging console enable secret 5 $1$h7jE$xVpB06lu79ILHE3sNTcD6/ ! no aaa new-model ! resource policy ! clock timezone GMT -12 clock summer-time NZDT recurring 1 Sun Oct 2:00 3 Sun Mar 3:00 ip cef ! ! ip inspect name firewall tcp ip inspect name firewall udp ip inspect name firewall cuseeme ip inspect name firewall h323 ip inspect name firewall rcmd ip inspect name firewall realaudio ip inspect name firewall streamworks ip inspect name firewall vdolive ip inspect name firewall sqlnet ip inspect name firewall tftp ip inspect name firewall ftp ip inspect name firewall icmp ip inspect name firewall sip ip inspect name firewall fragment maximum 256 timeout 1 ip inspect name firewall netshow ip inspect name firewall rtsp ip inspect name firewall skinny no ip domain lookup ip domain name yourdomain.com ip name-server 202.27.184.3 ip name-server 202.27.184.5 ! ! crypto pki trustpoint TP-self-signed-1468709229 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-1468709229 revocation-check none rsakeypair TP-self-signed-1468709229 ! ! crypto pki certificate chain TP-self-signed-1468709229 certificate self-signed 01 30820252 308201BB A0030201 02020101 300D0609 2A864886 F70D0101 04050030 31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 69666963 6174652D 31343638 37303932 3239301E 170D3032 30333031 30303132 35365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 34363837 30393232 3930819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 8100BD5D 1263CBEA 7532EE6B 547AB073 248347BF 4DA06A0A 02F46C0C 97E6AE8D 008BC9C6 BE1558EF D8829305 CD15A0CD 9869B65F B337FCBB 83ED2DE2 4AE0C79E 8C491B66 2A8FA5BA FFB2C6AD 58F50835 6880CD40 1874D330 213795A4 664AAF9D EB875BF6 2E23ED07 0739723F 757474F9 E72797F8 8E533BF1 5D9C4603 3A32F395 CFF90203 010001A3 7A307830 0F060355 1D130101 FF040530 030101FF 30250603 551D1104 1E301C82 1A414C4B 4F5F526F 75746572 2E796F75 72646F6D 61696E2E 636F6D30 1F060355 1D230418 30168014 E1F688A9 FB39F8CB 81166DEA 24893DB2 BE1BD695 301D0603 551D0E04 160414E1 F688A9FB 39F8CB81 166DEA24 893DB2BE 1BD69530 0D06092A 864886F7 0D010104 05000381 8100B83E 4731326A 0063694A 925669CA A84E60E0 38FA8980 AEA47267 E140BD09 0016AFBD E1DB8B29 DC4E6A08 6A6D4EFE 2846F874 FDF7CD73 BA71B503 18536449 A9A305E0 ECF09A0E E94158EA 24187B45 321144F5 8CB380D7 078E6AA1 E9E7FD61 BE629E63 08E8CDEB 3A2FB093 EE6B022B 8373FEF8 06ACA56E 3E194B2A 2BB76D7D 7533 quit username infinity privilege 15 password 7 00551D00165A1F550C295C4F5C4C1247000F ! ! ! crypto isakmp policy 10 encr 3des authentication pre-share lifetime 3600 crypto isakmp key a1k0nz129 address 202.9.18.82 no-xauth ! ! crypto ipsec transform-set alco-set01 esp-3des esp-sha-hmac ! crypto map alco-map01 10 ipsec-isakmp description Aukland Airport to Australia set peer 202.9.18.82 set transform-set alco-set01 match address 101 ! ! ! ! interface ATM0 no ip address no atm ilmi-keepalive dsl operating-mode auto ! interface ATM0.1 point-to-point no snmp trap link-status pvc 0/100 encapsulation aal5mux ppp dialer dialer pool-member 1 ! ! interface FastEthernet0 ! interface FastEthernet1 ! interface FastEthernet2 ! interface FastEthernet3 ! interface Dot11Radio0 no ip address shutdown speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0 station-role root ! interface Vlan1 description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$ ip address 192.168.9.1 255.255.255.0 ip nat inside ip virtual-reassembly ip tcp adjust-mss 1452 ! interface Dialer0 ip address negotiated ip access-group 160 in no ip redirects no ip unreachables ip mtu 1492 ip inspect firewall in ip inspect firewall out ip nat outside ip virtual-reassembly encapsulation ppp no ip route-cache cef no ip route-cache no ip mroute-cache dialer pool 1 dialer-group 2 no cdp enable ppp pap sent-username aklo_adsl.xadsl@xtra.co.nz password 7 08314D1B5C0E550516 ppp ipcp dns request crypto map alco-map01 ! ip route 0.0.0.0 0.0.0.0 Dialer0 ! no ip http server ip http access-class 23 no ip http secure-server ip nat inside source list 150 interface Dialer0 overload ip nat inside source list 150 interface Dialer0 overload ip nat inside source static tcp 192.168.9.70 80 125.236.193.105 80 extendable ip nat inside source static tcp 192.168.9.70 139 125.236.193.105 139 extendable ip nat inside source static tcp 192.168.9.70 445 125.236.193.105 445 extendable ip nat inside source static tcp 192.168.9.70 515 125.236.193.105 515 extendable ip nat inside source static tcp 192.168.9.70 631 125.236.193.105 631 extendable ip nat inside source static tcp 192.168.9.70 1782 125.236.193.105 1782 extendabl e ip nat inside source static tcp 192.168.9.70 9100 125.236.193.105 9100 extendabl e ! access-list 101 permit ip 192.168.9.0 0.0.0.255 192.168.1.0 0.0.0.255 access-list 110 permit ip 192.168.9.0 0.0.0.255 host 192.168.9.1 access-list 110 permit tcp any any eq www access-list 110 permit tcp any any eq 443 access-list 110 permit tcp any any eq smtp access-list 110 permit tcp any any eq 1723 access-list 110 permit gre any any access-list 110 permit udp any any eq domain access-list 110 permit udp any any eq 80 access-list 110 permit ip 192.168.9.0 0.0.0.255 192.168.1.0 0.0.0.255 access-list 110 permit ip 192.168.9.0 0.0.0.255 192.168.7.0 0.0.0.255 access-list 110 permit ip 192.168.9.0 0.0.0.255 192.168.2.0 0.0.0.255 access-list 110 permit ip 192.168.9.0 0.0.0.255 192.168.30.0 0.0.0.255 access-list 110 deny ip any any log access-list 110 permit icmp any any echo-reply access-list 110 permit icmp any any echo access-list 150 deny ip 192.168.9.0 0.0.0.255 10.0.0.0 0.255.255.255 access-list 150 deny ip 192.168.9.0 0.0.0.255 172.16.0.0 0.15.255.255 access-list 150 deny ip 192.168.9.0 0.0.0.255 192.168.0.0 0.0.255.255 access-list 150 permit ip 192.168.9.0 0.0.0.255 any access-list 160 permit tcp any any eq smtp access-list 160 permit tcp host 202.135.112.189 any eq 22 access-list 160 permit tcp any any eq www access-list 160 permit tcp any any eq 443 access-list 160 permit gre any any access-list 160 permit tcp any any eq 1723 access-list 160 permit udp any any eq isakmp access-list 160 permit udp any any eq non500-isakmp access-list 160 permit esp any any access-list 160 permit ip 192.16.1.0 0.0.0.255 192.168.9.0 0.0.0.255 access-list 160 deny ip any any log access-list 160 permit tcp any any eq 9100 no cdp run ! ! ! control-plane !
