geeoff
Guest
|
Posted:
Sun Oct 03, 2004 12:23 am Post subject:
Cisco 678 -- How do I configure it to use my 5 public, stati |
|
|
I have 5 public, static ip addresses leased plus 3 more reserved. The
range is:
63.x.x.n (reserved network)
63.x.x.n+1 (user assignable)
63.x.x.n+2 (user assignable)
63.x.x.n+3 (user assignable)
63.x.x.n+4 (user assignable)
63.x.x.n+5 (user assignable)
63.x.x.n+6 (reserved gateway)
63.x.x.n+7 (reserved broadcast)
I have an internal network running on 192.168.0.x that has 2
webservers that the public internet needs to get to. When I had my
Cisco 675, I simply enabled NAT and added NAT entries as follows:
set nat add entry 63.x.x.n+1 80 192.168.0.2 80 tcp
set nat add entry 63.x.x.n+2 80 192.168.0.3 80 tcp
now any public HTTP traffic for 63.x.x.n+1 would go to my internal
webserver @ 192.168.0.2 and HTTP traffic for 63.x.x.n+2 would go to
192.168.0.3.
This procedure does not work on my Cisco 678. Will someone please let
me know what I have to do in order to utilize my 5 public static IP
addresses again? When I say "does not work" I mean the
http://www.mydomain.com which is associated to 63.x.x.n+1 is not
accessible via the public internet. I have verified that the webserver
is functioning internally at http://localhost. Note:
http://www.mydomain2.com goes to 63.x.x.n+2 although this is not
configured yet. I do not want to give my webservers the public static
IPs, I want to use NAT to forward the public static ips to internal
static IPs.
Here is some diagnostic info off the 678:
cbos#sho nat
NAT is currently enabled
Port Network Global
eth0 Inside
wan0-0 Outside 63.x.x.n #reserved gateway IP
vip0 Outside
vip1 Outside
vip2 Outside
Local IP : Port Global IP : Port Timer Flags Proto Interface
192.168.0.2:80 63.x.x.n+1:80 0 0x00041 tcp eth0
192.168.0.2:80 63.x.x.n+1:80 0 0x00041 udp eth0
## where eth0 is Inside and using 192.168.0.1
cbos#sho int
IP Address Mask
eth0 192.168.0.1 255.255.255.240
vip0 0.0.0.0 255.255.255.248
vip1 0.0.0.0 255.255.255.0
vip2 0.0.0.0 255.255.255.0
wan0 Physical Port: Trained
Dest IP Address Mask
wan0-0 207.x.x.x 255.255.255.255 # configured via IPCP
Any help would be greatly appreciated!
Thanks in advance,
-geoff. |
|