I have a Cisco 871 behind a cable modem with 5 public IPs. I have configured the WAN for one of the IPs, and have configured the VLAN (192.168.1.0) for the 4 switch ports. I can access the internet fine, but NAT does not seem to work. Basically I am using the four remaining public IPs for NAT.
For instance, I have a FTP server with a local address of 192.168.1.135 which I translated to one of the public IPs but I cannot connect from the outside.
I made sure that the WAN port is set to outside and the VLAN is set to inside for NAT. I also disabled the firewall in case that is causing any problems with the same result. Does anyone have any ideas why NAT isn’t working?
Here is my running config:
!—————————————————————————-
!version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router
!
boot-start-marker
boot-end-marker
!
no logging buffered
!
no aaa new-model
!
crypto pki trustpoint TP-self-signed-347216607
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-347216607
revocation-check none
rsakeypair TP-self-signed-347216607
!
!
crypto pki certificate chain TP-self-signed-347216607
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33343732 31363630 37301E17 0D303230 33303130 32313433
395A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3334 37323136
36303730 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
9EF4D057 57F6C330 04BFBC5E FB7607BD 5A847AC6 92DF48B0 AE904273 B4239368
694180E4 DD3AA4EE 4355990A 22131CAB 45715FB7 A9369769 79586DA4 C30C92E6
401095F3 685BB987 C65707FF 3C376734 E1F79D1B D1B11AB7 90AD0A7E EACB3CE2
E48B5758 8AB7EEEF 903C6BE5 CAF0D7EF B5832F05 449BC56E 1CEEE70E 63B923E7
02030100 01A36630 64300F06 03551D13 0101FF04 05300301 01FF3011 0603551D
11040A30 08820652 6F757465 72301F06 03551D23 04183016 8014EC17 7E4A4165
76CACE0A 632CA698 5B887207 8554301D 0603551D 0E041604 14EC177E 4A416576
CACE0A63 2CA6985B 88720785 54300D06 092A8648 86F70D01 01040500 03818100
8FFB6964 A80A00A0 9F6483AD 4C0D7327 38BAAC3E 6F382AFF 265A3E48 D0A70360
D052E80C CD34F7D7 8CC29457 353F8929 D05B1C0D 42094DB9 DCFB91F8 1DB97587
622962CE E51A593C 4D2CE247 1B7092DA F17F5B3F 9616980F EBADA7F4 1A74312D
A39F3757 16B6DED6 3A9210C4 2394BFE3 B3DFA2A7 A4C12CB6 4284B0F5 4C095AC4
quit
dot11 syslog
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.100
!
ip dhcp pool pool2
import all
network 192.168.1.0 255.255.255.0
dns-server 66.75.164.89 66.75.164.90
default-router 192.168.1.1
netbios-name-server 192.168.1.100
!
!
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
!
!
username XXXXX privilege 15 password 0 XXXXXX
!
!
archive
log config
hidekeys
!
!
!
!
!
interface FastEthernet0
!
interface FastEthernet1
!
interface FastEthernet2
!
interface FastEthernet3
!
interface FastEthernet4
ip address x.x.x.y 255.255.255.248
ip nat outside
ip virtual-reassembly
shutdown
duplex auto
speed auto
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 x.x.x.y (Cable Modem Gateway)
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
ip nat inside source list 1 interface FastEthernet4 overload
ip nat inside source static tcp 192.168.1.135 21 x.x.x.y 21 extendable
ip nat inside source static tcp 192.168.1.189 631 x.x.x.y 631 extendable
ip nat inside source static tcp 192.168.1.155 3389 x.x.x.y 3389 extendable
ip nat inside source static tcp 192.168.1.154 5905 x.x.x.y 5905 extendable
ip nat inside source static tcp 192.168.1.144 5908 x.x.x.y 5908 extendable
ip nat inside source static tcp 192.168.1.106 55353 x.x.x.y 55353 extendable
ip nat inside source static tcp 192.168.1.142 80 x.x.x.y 80 extendable
ip nat inside source static tcp 192.168.1.142 3389 x.x.x.y 3389 extendable
ip nat inside source static tcp 192.168.1.142 8080 x.x.x.y 8080 extendable
ip nat inside source static tcp 192.168.1.191 80 x.x.x.y 80 extendable
ip nat inside source static tcp 192.168.1.160 5809 x.x.x.y 5809 extendable
ip nat inside source static tcp 192.168.1.191 5903 x.x.x.y 5903 extendable
ip nat inside source static tcp 192.168.1.109 5904 x.x.x.y 5904 extendable
ip nat inside source static tcp 192.168.1.186 5911 x.x.x.y 5911 extendable
ip nat inside source static tcp 192.168.1.159 5915 x.x.x.y 5915 extendable
!
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 192.168.1.0 0.0.0.255
!
!
!
control-plane
!
!
line con 0
no modem enable
line aux 0
line vty 0 4
privilege level 15
login local
transport input telnet ssh
!
scheduler max-task-time 5000
end