I recently updated my Cisco 1721 to use IOS 12.4 so I could ssh to the router. It all seems to be running just dandy and I'm happy with that. You can view the config here:
Now, I've got a couple questions for you all:
1. I'd like to create a pinhole so to speak so I can ssh directly to a server on the internal network. I've done some research, Googling, etc. and it seems like this is the way to go:
So in my case I want to do ssh:
nat inside source static tcp MY_INTERNAL_SERVER 22 interface dialer 1 22
2. I haven't touched my config in some time and am wondering if you have suggestions for me, things to update, etc. I've got that Hardening Cisco Routers book I'm going to go through this evening. Anything else?
Heckles, suggestions always welcome ;-)
For 1., you are correct.
I suggest you also to look at DDNS, you can have your router to register to the DDNS server when the ip on dialer int changes. That will allow you to always be able to resolve your server if you dont have a static IP and dns service.