cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
279
Views
0
Helpful
2
Replies

Cannot access Internet from DMZ server

jonl711
Level 1
Level 1

I have a mail server that is in the DMZ which is behind the Cisco 2621 router. I cannot get it to ping past the internal interface. There is a ip nat statement:

ip nat inside source list 10 interface Dialer1 overload

But this is not helping, the Dialer1 interface has "ip nat outside" in it's configuration. What else do I need to get this server to access the outside?

I've included the config file for the router.

Thanks

2 Replies 2

John Blakley
VIP Alumni
VIP Alumni

What is the mail server ip address? If it's on the 192.168.6 or .7 subnet, you'll need to add "ip nat inside" on interface fa0/1. Then you'll need to add the 192.168.6.0 and 192.168.7.0 subnets to your access-list 10 that you're using to nat with.

HTH,

John

HTH, John *** Please rate all useful posts ***

The mail server is on 203.153.242.19 and 192.168.3.3, but the issue was having the 2 "ip nat inside" statements I took them out and all is good so far.

Review Cisco Networking products for a $25 gift card