	[x] Posted via EE Mobile
	Search, ask, and monitor your questions on the go with EE Mobile. Visit Experts Exchange from your mobile device and never be out of touch again.

Question

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

6.8

Cisco 877 Router config for Port Forwarding

Asked by prema2909 in Enterprise Firewalls, Network Routers, Miscellaneous Networking

Tags: Cisco 877 Networking Router

Could someone please help with a beginner cisco 877 question
We have a cisco 877 configured as a ADSL gateway. The suppliers have been requested to port forward a server with the address 192.168.1.4 on 22 so that we have SSH access from the internet.

This is my first time looking at a Cisco router. The supplier configured

ip nat inside source static tcp 192.168.1.4 22 interface Dialer0 22

but the connection did not work at all

I have just tried

config t
ip access-list ext 101
permit txp any any eq 22
end

and now my external SSH client connects but the server does not respond to the correct password.
From inside the network it's fine

We don't seem to have an external connection in the router

Can anyone help with this please?
Config file is below

View the Solution FREE for 30 Days

         
           
             1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:
86:
87:
88:
89:
90:
91:
92:
93:
94:
95:
96:
97:
98:
99:
100:
101:
102:
103:
104:
105:
106:
107:
108:
109:
110:
111:
112:
113:
114:
115:
116:
117:
118:
119:
120:
121:
122:
123:
124:
125:
126:
127:
128:
129:
130:
131:
132:
133:
134:
135:
136:
137:

           
           
             ADSL#show running-config
Building configuration...
 
Current configuration : 4302 bytes
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
service sequence-numbers
!
hostname ADSL
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
clock timezone NZST 12
clock summer-time NZDT recurring 1 Sun Oct 2:00 3 Sun Mar 3:00
!
!
dot11 syslog
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.150
!
ip dhcp pool DHCPPOOL1
   import all
   network 192.168.1.0 255.255.255.0
   default-router 192.168.1.2
   dns-server 202.27.184.3 202.27.184.5
   update arp
!
!
!
multilink bundle-name authenticated
!
!
file verify auto
username cisco877 privilege 15 password 0 ciscopassword
!
!
archive
 log config
  hidekeys
!
!
ip tcp timestamp
!
!
!
interface ATM0
 no ip address
 no atm ilmi-keepalive
 dsl operating-mode auto
!
interface ATM0.1 point-to-point
 pvc 0/100
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface Vlan1
 ip address 192.168.1.2 255.255.255.0
 ip nat inside
 ip virtual-reassembly
!
interface Dialer0
 ip address negotiated
 no ip redirects
 no ip unreachables
 ip nat outside
 ip virtual-reassembly
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 no cdp enable
 ppp pap sent-username nzgbc.dsl@iconzadsl.co.nz password 0 nzgbc
 ppp ipcp dns request
 ppp ipcp route default
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 Dialer0
!
!
no ip http server
no ip http secure-server
ip dns server
no ip nat service sip tcp port 5060
no ip nat service sip udp port 5060
ip nat pool trixbox 192.168.1.150 192.168.1.150 netmask 255.255.255.0 type rotary
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 192.168.1.3 3996 interface Dialer0 3996
ip nat inside source static tcp 192.168.1.14 3389 interface Dialer0 3389
ip nat inside source static tcp 192.168.1.17 3997 interface Dialer0 3997
ip nat inside source static tcp 192.168.1.2 23 interface Dialer0 23
ip nat inside source static tcp 192.168.1.150 22 interface Dialer0 2222
ip nat inside source static udp 192.168.1.150 5060 interface Dialer0 5060
ip nat inside source static udp 192.168.1.150 4569 interface Dialer0 4569
ip nat inside source static tcp 192.168.1.150 5222 interface Dialer0 5222
ip nat inside source static tcp 192.168.1.4 80 interface Dialer0 3998
ip nat inside source static tcp 192.168.1.4 443 interface Dialer0 443
ip nat inside source static tcp 192.168.1.4 21 interface Dialer0 21
ip nat inside source static tcp 192.168.1.4 3306 interface Dialer0 3306
ip nat inside source static tcp 192.168.1.4 22 interface Dialer0 22
ip nat inside source static tcp 192.168.1.15 3389 interface Dialer0 3390
ip nat inside destination list 101 pool trixbox
!
access-list 1 remark The Lan
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 101 permit udp any any range 35000 40000
access-list 101 permit tcp any any range 35000 40000
access-list 101 permit udp any any range 10000 20000
access-list 101 permit tcp any any range 10000 20000
access-list 101 permit tcp any any eq telnet
access-list 101 permit tcp any any eq 22
access-list 101 permit tcp any any eq 3398
access-list 101 permit tcp any any eq 3998
dialer-list 1 protocol ip permit
!
!
!
!

           
         

	Title
1	Cisco router PBR not working
2	Need help configuring Cisco 857w …
3	Cisco 877 ADSL
4	ASA 5520 + Cisco 2811 router …
5	cisco adsl router - port forwarding
6	Cannot Get SIP Phones Working Behind…

Cisco 877 Router config for Port Forwarding

Asked by prema2909 in Enterprise Firewalls, Network Routers, Miscellaneous Networking

Tags: Cisco 877 Networking Router

About this solution