What a relief, simple pilot error...
The customer didn't mention that the machine couldn't get out to the 'net
either... Had no default route set on their machine.
Jumped the gun on blaming ios bugs...
Charles
On Fri, 9 Nov 2001, Charles Sprickman wrote:
> Hi,
>
> I'm trying to add some static mappings to a simple NAT/PAT setup.
>
> Currently, everything is working like so:
>
> ip nat inside source list 50 interface Serial1 overload
>
> !
> interface Ethernet0
> ip address 10.0.0.1 255.255.255.0
> ip nat inside
> no ip route-cache
> no ip mroute-cache
> !
>
> !
> interface Serial1
> ip address 216.223.xxx.xx8 255.255.255.252
> ip nat outside
> encapsulation ppp
> service-module t1 clock source internal
> service-module t1 timeslots 1-2
> !
>
> access-list 50 permit 10.0.0.0 0.0.0.255
>
> All is well there... Looking at another customer I set up, the only thing
> I added to get their mail server working was a line like so:
>
> ip nat inside source static tcp 192.168.0.45 25 216.223.xxx.xx4 25 extendable
>
> And that works fine. However adding a similar line to the above config:
>
> ip nat inside source static tcp 10.0.0.102 110 216.223.xxx.xx8 110 extendable
> ip nat inside source static tcp 10.0.0.102 25 216.223.xxx.xx8 25 extendable
>
> ...does not work. Before adding these lines, trying to reach those ports
> gave an immediate "connection refused". After adding them (and even
> clearing the translation tables and then reloading for good measure), I
> simply get a "connection timed out".
>
> Am I doing this right, or is it a bug? IOS is IOS (tm) 1600 Software
> (C1600-SY-M), Version 11.3(7)T
>
> I'd hate to have to load a new image on here, as I seem to recall that the
> 1600 is a bit rough to work with remotely.
>
> Any ideas?
>
> Thanks,
>
> Charles
>
> | Charles Sprickman | Internet Channel
> | INCH System Administration Team | (212)243-5200
> | spork@inch.com | access@inch.com
>
This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:53 EDT