Hi Cisco 2621 does not allow DNS resolution from the outside and for the life of me cannot figure out why. I also tried to implement ip subnet-zero and ip classless but the command, though entered successfully, it did not show up in the config. Any input would be welcome.
Here is the nslookup from outside and also my run config.
— SNIP —
c:\nslookup www.mysite.com 12.34.67.98
*** Can’t find server name for address 12.34.67.98: Server failed
Server: UnKnown
Address: 12.34.67.98
DNS request timed out.
timeout was 2 seconds.
— END SNIP —
Does the router need to be rebooted after the change? Any other ideas?
———– SNIP ———–
Building configuration…
Current configuration : 3165 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname router-wp
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxx
!
no aaa new-model
no network-clock-participate slot 1
no network-clock-participate wic 0
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.100
ip dhcp pool webport
network 192.168.1.0 255.255.255.0
dns-server 12.34.67.13 12.34.67.15
domain-name webport.ca
default-router 192.168.1.1
!
!
no ip domain lookup
ip name-server 12.34.67.13
ip name-server 12.34.67.15
ip name-server 192.168.1.105
ip name-server 192.168.1.99
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
interface FastEthernet0/0
description Connection to WAN
ip address 12.34.67.98 255.255.252.0 secondary
ip address 12.34.67.99 255.255.252.0 secondary
ip address 12.34.67.100 255.255.252.0 secondary
ip address 12.34.67.101 255.255.252.0 secondary
ip address 12.34.67.97 255.255.252.0
ip access-group FILTER-WAN-IN in
ip access-group FILTER-WAN-OUT out
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
description Connection to LAN
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
!
router rip
version 2
network 12.0.0.0
network 192.168.1.0
no auto-summary
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 12.34.67.1
!
!
no ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/0 overload
ip nat inside source static udp 192.168.1.105 53 12.34.67.98 53 extendable
ip nat inside source static 192.168.1.105 12.34.67.98 extendable
ip nat inside source static 192.168.1.99 12.34.67.99 extendable
ip nat inside source static 192.168.1.100 12.34.67.100 extendable
!
ip access-list extended FILTER-LAN-IN
permit ip any any
permit tcp any host 12.34.67.97 eq pop3
permit tcp any host 12.34.67.97 eq smtp
permit tcp any host 12.34.67.97 eq ftp
permit tcp any host 12.34.67.97 eq ftp-data
permit tcp any host 12.34.67.97 eq 443
permit tcp any host 12.34.67.97 eq 22
permit udp any host 12.34.67.97 eq 22
permit udp any host 12.34.67.97 eq domain
permit udp any host 12.34.67.97 eq 23
permit tcp any host 12.34.67.97 eq telnet
permit udp any host 12.34.67.97 eq 25
permit udp any host 12.34.67.97 eq 50
permit tcp any host 12.34.67.97 eq 50
permit tcp any host 12.34.67.97 eq www
permit udp any host 12.34.67.97 eq 80
permit udp any host 12.34.67.97 eq 110
permit udp any host 12.34.67.97 eq 220
permit tcp any host 12.34.67.97 eq 220
permit udp any host 12.34.67.97 eq 443
permit udp any host 12.34.67.97 eq 3389
permit tcp any host 12.34.67.97 eq 3389
ip access-list extended FILTER-LAN-OUT
permit ip any any
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 1 permit 12.34.67.0 0.0.0.255
access-list 1 permit any
!
!
control-plane
!
!
line con 0
line aux 0
line vty 0 4
password xxxxxxxx
login
!
!
end
router-wp#