static nat problems

From: Charles Sprickman (spork@inch.com)
Date: Fri Nov 09 2001 - 13:23:22 EST


Hi,

I'm trying to add some static mappings to a simple NAT/PAT setup.

Currently, everything is working like so:

ip nat inside source list 50 interface Serial1 overload

!
interface Ethernet0
 ip address 10.0.0.1 255.255.255.0
 ip nat inside
 no ip route-cache
 no ip mroute-cache
!

!
interface Serial1
 ip address 216.223.xxx.xx8 255.255.255.252
 ip nat outside
 encapsulation ppp
 service-module t1 clock source internal
 service-module t1 timeslots 1-2
!

access-list 50 permit 10.0.0.0 0.0.0.255

All is well there... Looking at another customer I set up, the only thing
I added to get their mail server working was a line like so:

ip nat inside source static tcp 192.168.0.45 25 216.223.xxx.xx4 25 extendable

And that works fine. However adding a similar line to the above config:

ip nat inside source static tcp 10.0.0.102 110 216.223.xxx.xx8 110 extendable
ip nat inside source static tcp 10.0.0.102 25 216.223.xxx.xx8 25 extendable

...does not work. Before adding these lines, trying to reach those ports
gave an immediate "connection refused". After adding them (and even
clearing the translation tables and then reloading for good measure), I
simply get a "connection timed out".

Am I doing this right, or is it a bug? IOS is IOS (tm) 1600 Software
(C1600-SY-M), Version 11.3(7)T

I'd hate to have to load a new image on here, as I seem to recall that the
1600 is a bit rough to work with remotely.

Any ideas?

Thanks,

Charles

| Charles Sprickman | Internet Channel
| INCH System Administration Team | (212)243-5200
| spork@inch.com | access@inch.com



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:13:22 EDT