Networks

Ask something
Discussion Locked

CISCO FW How do I set up a web server

0 helpful
2 replies

by stephen.tickhill

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

HI I have a cisco 803 ISDN router with a fixed IP from my ISP. I have the IP + FW feature set and am struggling to setup a nat connection that allows me to run an internal private web server and mail server and open it up to the web.

I have tried various settings and am probably getting confused.

BAsically I have the following interfaces
ROUTER
ethernet interface 0 192.168.0.100 255.255.255.0
Dialer 1 Interface x.x.x.x 2555.255.255.0 (assigned the IP from my ISP)
Local LAN
Web Server 192.168.0.99
Mail Server 192.168.0.98
various lan hosts 192.168.0.1 to 192.168.0.50

POLICY
allow all internal connections out to the net
allow only connections in to the web and mail servers
deny everthing else in

I have only 1 public IP address and that is assigned to the Dialer 1 interface. My ISP does not block any ports so connecting to my x.x.x.x address on 80 or 25 or whatever ports I configure in the servers should be able to get through. However I cannot get this to work and need some advice as to the exact setup of the access-list and IP nat statements.

Hope someone can help.

Regards
Stephen

2 replies

by rasman

Need more info if you need a precise config here is an example.
Enjoy.

Ras
www.computouchinc.com

service timestamps debug uptime
service timestamps log uptime
service password-encryption
no service tcp-small-servers
no service udp-small-servers
!
hostname Cisco803
!
enable password cisco
!
no ip name-server
!
isdn switch-type basic-ni1
pots country US
!
ip subnet-zero
no ip domain-lookup
ip routing
!
interface Dialer 1
description connected to Internet
ip address negotiated
ip nat outside
no ip split-horizon
encapsulation ppp
dialer in-band
dialer idle-timeout 120
dialer string 5551111
dialer hold-queue 10
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname user
ppp chap password cisco
ppp pap sent-username user password cisco
no ppp multilink
no cdp enable
!
interface Ethernet 0
no shutdown
description connected to Cisco1548
ip address 192.168.0.100 255.255.255.0
ip nat inside
keepalive 10
!
interface BRI 0
no shutdown
description connected to Internet
no ip address
dialer rotary-group 1
isdn spid1 5551111
isdn spid2 5552222
!
! Access Control List 1
!
no access-list 1
access-list 1 permit 192.168.0.0 0.0.0.255
!
! Dialer Control List 1
!
no dialer-list 1
dialer-list 1 protocol ip permit
!
! Dynamic NAT
!
ip nat translation timeout 86400
ip nat translation tcp-timeout 86400
ip nat translation udp-timeout 300
ip nat translation dns-timeout 60
ip nat translation finrst-timeout 60
ip nat inside source list 1 interface Dialer 1 overload
!
router rip
version 2
network 192.168.0.0
passive-interface Dialer 1
no auto-summary
!
!
ip classless
!
! IP Static Routes
ip route 0.0.0.0 0.0.0.0 Dialer 1
no ip http server
snmp-server community public RO
no snmp-server location
no snmp-server contact
!
line console 0
exec-timeout 0 0
password cisco
login
!
line vty 0 4
password cisco
login
!
end

This discussion is closed to new replies.