	[x] Posted via EE Mobile
	Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.

Question

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

7.3

Port forwarding SMTP with Cisco 877

Asked by Sc0tte in Network Routers, Network Switches & Hubs, Network Design & Methodology

Tags: CISCO 877, SMTP, Port Forward

I'm a bit noob when it comes to CISCO configs. This one was written by our ISP, and then tinkered with from our PABX people.

We run our own exchange email server internally on 10.10.1.2, but I am moving this to 10.10.1.3. I can't see anywhere in the script to change this. Only reference to 10.10.1.2 i can find is to port forward (443) to existing mail server.

I want to have (443) and (25) port forwarding to 10.10.1.3.... I'm just not sure how it's being forwarded at the moment to 10.10.1.2... ??

The config is supposed to allow
- anything outgoing from 10.10.1.32 --> 10.10.1.40.
- incoming usual stuff to any (DNS, WWW, SSL, FTP)
- outgoing SMTP from 10.10.1.2 and 10.10.1.3 only
- VPN connections from 10.10.1.41 - 10.10.1.50

I have a hunch it's something to do with this???

route-map nonat permit 10
match ip address 102

If anyone can shed some light on this for me, it would be greatly appreciated.

Get your answer NOW

         
           
             1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:
138:
139:
140:
141:
142:
143:
144:
145:
146:
147:
148:
149:
150:
151:
152:
153:
154:
155:
156:
157:
158:
159:
160:
161:
162:
163:
164:
165:
166:
167:
168:
169:
170:
171:
172:
173:
174:
175:
176:
177:
178:
179:
180:
181:
182:
183:
184:
185:
186:
187:
188:
189:
190:
191:
192:
193:
194:
195:
196:
197:
198:
199:
200:
201:
202:
203:
204:
205:
206:
207:
208:
209:
210:
211:
212:
213:
214:
215:
216:
217:
218:
219:
220:
221:
222:
223:
224:
225:
226:
227:
228:
229:
230:
231:
232:
233:
234:
235:
236:
237:
238:
239:
240:
241:
242:
243:
244:
245:
246:
247:
248:
249:
250:
251:
252:
253:
254:
255:
256:

           
           
             BrisbaneI#show running-config                                                   
Building configuration...                                                       
                                                                                
Current configuration : 6490 bytes                                              
!                                                                               
version 12.4                                                                    
no service pad                                                                  
service tcp-keepalives-in                                                       
service tcp-keepalives-out                                                      
service timestamps debug datetime msec localtime                                
service timestamps log datetime msec localtime                                  
service password-encryption                                                     
service sequence-numbers                                                        
!                                                                               
hostname BrisbaneI                                                              
!                                                                               
boot-start-marker                                                               
boot-end-marker                                                                 
!                                                                               
logging buffered 51200                                                          
enable password ****************                                           
!                                                                               
aaa new-model                                                                   
!                                                                               
!                                                                               
aaa authentication login default line                                           
aaa authentication ppp default group radius local                               
aaa authorization network default group radius local                            
!                                                                               
!                                                                               
aaa session-id common                                                           
no ip cef                                                                       
!                                                                               
!                                                                               
!                                                                               
!                                                                               
ip vrf VPN                                                                      
 rd 1:1                                                                         
!                                                                               
ip inspect max-incomplete high 1100                                             
ip inspect max-incomplete low 1100                                              
ip inspect one-minute high 1100                                                 
ip inspect one-minute low 1100                                                  
ip inspect udp idle-time 60                                                     
ip inspect dns-timeout 10                                                       
ip inspect name FIRE tcp timeout 3600                                           
ip inspect name FIRE udp timeout 15                                             
ip inspect name FIRE ftp timeout 3600                                           
ip inspect name FIRE rcmd timeout 3600                                          
ip inspect name FIRE smtp timeout 3600                                          
ip inspect name FIRE sqlnet timeout 3600                                        
ip inspect name FIRE tftp timeout 30                                            
ip inspect name FIRE icmp timeout 30                                            
ip inspect name FIRE ssh timeout 3600                                           
ip inspect name FIRE dns timeout 15                                             
ip inspect name FIRE http timeout 3600                                          
ip inspect name FIRE https timeout 3600                                         
ip inspect name FIRE imap timeout 3600                                          
ip inspect name FIRE imaps timeout 3600                                         
ip inspect name FIRE rtsp timeout 3600                                          
!                                                                               
multilink bundle-name authenticated                                             
async-bootp dns-server 10.10.1.7                                                
vpdn enable                                                                     
!                                                                               
vpdn-group 1                                                                    
! Default PPTP VPDN group                                                       
 accept-dialin                                                                  
  protocol pptp                                                                 
  virtual-template 1                                                            
 l2tp tunnel password 7                                                         
!                                                                               
!                                                                               
!                                                                               
!                                                                               
!                                                                               
username admin privilege 15 password **********************                       
username tester password 7 *******************                                    
!                                                                               
!                                                                               
class-map match-any PRIORITY-DATA                                               
 description Important traffic such as RDP, VNC and Citrix traffic              
 match access-group name ImportantTraffic                                       
class-map match-all VOICE                                                       
 description VoIP call traffic as tagged by the server                          
 match ip dscp ef                                                               
class-map match-any CALL-SIGNALING                                              
 description VoIP signaling traffic as tagged by the server                     
 match ip dscp cs3                                                              
 match ip dscp af31                                                             
!                                                                               
!                                                                               
policy-map QOS-policy-outside-outbound                                          
 class VOICE                                                                    
  priority percent 50                                                           
 class CALL-SIGNALING                                                           
  bandwidth percent 5                                                           
 class PRIORITY-DATA                                                            
  bandwidth percent 10                                                          
 class class-default                                                            
  fair-queue                                                                    
  queue-limit 30                                                                
!                                                                               
!                                                                               
!                                                                               
!                                                                               
!                                                                               
!                                                                               
interface Loopback0                                                             
 no ip address                                                                  
!                                                                               
interface Loopback1                                                             
 ip address 10.0.0.1 255.255.255.255                                            
!                                                                               
interface ATM0                                                                  
 no ip address                                                                  
 load-interval 30                                                               
 no atm ilmi-keepalive                                                          
 pvc 8/35                                                                       
  vbr-nrt 384 384 1                                                             
  encapsulation aal5mux ppp dialer                                              
  dialer pool-member 1                                                          
  service-policy output QOS-policy-outside-outbound                             
 !                                                                              
 dsl operating-mode auto                                                        
!                                                                               
interface FastEthernet0                                                         
!                                                                               
interface FastEthernet1                                                         
!                                                                               
interface FastEthernet2                                                         
!                                                                               
interface FastEthernet3                                                         
!                                                                               
interface Virtual-Template1                                                     
 ip unnumbered Vlan1                                                            
 peer default ip address pool DIAL-IN                                           
 ppp mtu adaptive                                                               
 ppp encrypt mppe auto required                                                 
 ppp authentication ms-chap ms-chap-v2                                          
!                                                                               
interface Vlan1                                                                 
 bandwidth 6000                                                                 
 bandwidth receive 384                                                          
 ip address 10.10.1.10 255.255.255.0                                            
 ip nat inside                                                                  
 ip inspect FIRE in                                                             
 ip virtual-reassembly                                                          
 ip tcp adjust-mss 1420                                                         
!                                                                               
interface Dialer1                                                               
 bandwidth 384                                                                  
 bandwidth receive 6000                                                         
 ip address negotiated                                                          
 ip mtu 1460                                                                    
 ip nat outside                                                                 
 ip virtual-reassembly                                                          
 encapsulation ppp                                                              
 ip route-cache flow                                                            
 no ip mroute-cache                                                             
 dialer pool 1                                                                  
 dialer idle-timeout 0                                                          
 dialer persistent                                                              
 dialer-group 1                                                                 
 ppp chap hostname taiyo.brisbane02@internode.on.net                            
 ppp chap password 7 0518011532475F0E0E16                                       
!                                                                               
ip local pool DIAL-IN 10.10.1.41 10.10.1.50                                     
ip route 0.0.0.0 0.0.0.0 Dialer1                                                
ip route 10.10.2.0 255.255.255.0 10.10.1.11                                     
!                                                                               
!                                                                               
no ip http server                                                               
no ip http secure-server                                                        
ip nat inside source route-map nonat interface Dialer1 overload                 
ip nat inside source static tcp 10.10.1.1 21 150.101.199.99 21 extendable       
ip nat inside source static tcp 10.10.1.2 443 150.101.199.99 443 extendable     
!                                                                               
ip access-list extended ImportantTraffic                                        
 permit tcp any any eq 3389                                                     
 permit tcp any any eq 5900                                                     
 permit tcp any any eq 5901                                                     
 permit tcp any any eq 1494                                                     
 permit tcp any any eq 3784                                                     
ip access-list extended incoming                                                
 permit tcp any host 150.101.199.99 eq smtp                                     
 permit tcp any host 150.101.199.99 eq www                                      
 permit tcp any host 150.101.199.99 eq 443                                      
 permit tcp any host 150.101.199.99 eq ftp-data                                 
 permit tcp any host 150.101.199.99 eq ftp                                      
 permit tcp any host 150.101.199.99 eq 5060                                     
 permit udp any host 150.101.199.99 eq 5060                                     
 permit icmp any any                                                            
 permit gre any any                                                             
 permit tcp any host 150.101.199.99 eq 1723                                     
 permit udp any host 150.101.199.99 eq 1701                                     
 permit tcp any host 150.101.199.99 eq 3784                                     
 permit udp any host 150.101.199.99 eq 3784                                     
!                                                                               
access-list 101 permit ip 10.10.1.0 0.0.0.255 10.10.2.0 0.0.0.255               
access-list 102 deny   ip 10.10.1.0 0.0.0.255 10.10.2.0 0.0.0.255               
access-list 102 permit tcp 10.10.1.0 0.0.0.255 any eq www                       
access-list 102 permit tcp 10.10.1.0 0.0.0.255 any eq 443                       
access-list 102 permit tcp 10.10.1.0 0.0.0.255 any eq ftp-data                  
access-list 102 permit tcp 10.10.1.0 0.0.0.255 any eq ftp                       
access-list 102 permit tcp 10.10.1.0 0.0.0.255 any eq domain                    
access-list 102 permit udp 10.10.1.0 0.0.0.255 any eq domain                    
access-list 102 permit tcp host 10.10.1.2 any eq smtp                           
access-list 102 permit tcp host 10.10.1.3 any eq smtp                           
access-list 102 permit ip host 10.10.1.5 any                                    
access-list 102 permit ip host 10.10.1.9 any                                    
access-list 102 permit tcp host 10.10.1.32 any                                  
access-list 102 permit ip host 10.10.1.32 any                                   
access-list 102 permit tcp host 10.10.1.33 any                                  
access-list 102 permit ip host 10.10.1.33 any                                   
access-list 102 permit tcp host 10.10.1.34 any                                  
access-list 102 permit ip host 10.10.1.34 any                                   
access-list 102 permit tcp host 10.10.1.35 any                                  
access-list 102 permit ip host 10.10.1.35 any                                   
access-list 102 permit tcp host 10.10.1.36 any                                  
access-list 102 permit ip host 10.10.1.36 any                                   
access-list 102 permit ip host 10.10.1.37 any                                   
access-list 102 permit tcp host 10.10.1.38 any                                  
access-list 102 permit ip host 10.10.1.38 any                                   
access-list 102 permit tcp host 10.10.1.39 any                                  
access-list 102 permit ip host 10.10.1.39 any                                   
access-list 102 permit tcp host 10.10.1.40 any                                  
access-list 102 permit ip host 10.10.1.40 any                                   
!                                                                               
!                                                                               
!                                                                               
route-map nonat permit 10                                                       
 match ip address 102                                                           
!                                                                               
radius-server host 10.10.1.7 auth-port 1645 acct-port 1646 key 7 **************
4                                                                               
!                                                                               
control-plane                                                                   
!                                                                               
!                                                                               
line con 0                                                                      
 no modem enable                                                                
line aux 0                                                                      
line vty 0 4                                                                    
 exec-timeout 240 0                                                             
 privilege level 15                                                             
 password 7 **************                                                
!                                                                               
scheduler max-task-time 5000                                                    
!                                                                               
webvpn context Default_context                                                  
 ssl authenticate verify all                                                    
 !                                                                              
 no inservice                                                                   
!                                                                               
end

           
         

	Title
1	Cisco VPN and multiple subnets
2	Cisco VPN with ASA5505 and PIX…
3	How do I configure a Cisco 5505 to …
4	Cisco ASA 5510 Remote Access V…
5	Cisco 1811 Site to Site - VPN up b…
6	URGENT!! VPN connection on Vista …

Port forwarding SMTP with Cisco 877

Asked by Sc0tte in Network Routers, Network Switches & Hubs, Network Design & Methodology

Tags: CISCO 877, SMTP, Port Forward

About this solution