Hello Reza, I have inserted in the initial thread the information you requested. The setup I have is a 2 router and one switch config. the webrouter is out in front and I want to use it for the DMZ. The web router has 3 interfaces. The first is the incoming static ip. the second is the 9 port switch that I am using for the web services. The third interface is connected to my internal Lan router which in turn is connected to a Catalyst switch. I have had schooling in CCNA. I have tried for a few months to find a working config and can't. Thanks for your help.

The internal network is fine. I can surf the web through the whole setup. I place the server outside the whole schema and I can surf my server. When I place the server onto the 9 port switch with a ip of 10.10.10.3 and use the static nat to forward from fa0 to 10.10.10.3 on the switch I am unable to surf the web server from the www.mywebserver.net. I can however set my browser to 10.10.10.3 and my webpage comes up.

Message was edited by: Gary Lefebvre

I have made some headway on creating a DMZ for my Linux webserver. I am using CentOS with Virtualmin to host my 3 websites. I managed to place my webserver in the DMZ with a private address using NAT to froward the packets to the webserver. Everything is working perfectly with the above mentioned Cisco setup. The confusing thing now is if I try to call one of my websites in a browser from "my internal network", a message appears in the browser that "The connection to the server was reset while the page was loading.". But if I go to a friends house and use their computer to call one of my websites the webpages come up in the browser.

Hi Gary,

Do you use the same browser type and version at your friend's house and at your house?

Reza

I use Mozilla at home and my friend uses IE8

Gary,

The fact that you can bring up the web page from another location means the configuration on the router is fine.

The only possible configuration causing the behavior that you cannot access the page from other location is an ACL (which is not the case here).

So, I will say that you need to check either your browser or client settings.

Federico.

Try using IE at home too and see what happens.

Reza

Where do I begin? I am running on my Desktop Windows 7. IE8 comes standard with this OS. IE8 won't run for me. I've loaded a fresh install of Windows 7 when the OS came out. So I can't use IE8, so I downloaded Google Chrome and again the server error is the same as above mentioned. Also I am running Dreamweaver and since I brought the server in a DMZ I cannot FTP to the server. I have another router on the internal network, behind the DMZ which my Desktop PC is connected to and I have no existing ACL's that will stop my PC from connecting to my Server. Oh well I guess I'm leaning towards reloading Windows 7.

version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec localtime show-timezone
service password-encryption
!
hostname LanRouter
!
boot-start-marker
boot-end-marker
!
logging buffered 4096 informational
enable secret 5 something
!
no aaa new-model
!
resource policy
!
clock timezone Eastern -5
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 172.17.1.1 172.17.1.10
!
ip dhcp pool MyCiscoSwitch
   import all
   network 172.17.1.0 255.255.255.0
   default-router 172.17.1.1
   dns-server 68.87.71.226
   lease 0 2
!
!
no ip domain lookup
!
username GarysHome privilege 0 secret 5 something
!
!
!
interface Loopback0
no ip address
!
interface FastEthernet0/0
ip address 172.17.2.2 255.255.255.252
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 172.17.1.1 255.255.255.0
duplex auto
speed auto
!
ip classless
ip route 0.0.0.0 0.0.0.0 172.17.2.1
!
no ip http server
!
access-list 23 permit 172.17.1.0 0.0.0.255
access-list 23 permit 10.10.10.0 0.0.0.31
access-list 101 permit udp host 68.87.71.226 172.17.1.0 0.0.0.255
access-list 101 permit tcp any 172.17.1.0 0.0.0.255 established
access-list 101 permit udp any any eq tftp
access-list 101 permit udp any any eq ntp
access-list 101 permit udp host 172.17.2.1 172.17.1.0 0.0.0.255
access-list 101 permit udp host 10.10.10.3 172.17.1.0 0.0.0.31
!
control-plane
!
banner login ^C
This system is solely for the use of authorized users for official purposes.
You have no expectation of privacy in its use and to ensure that the system
to having all of their activities monitored and recorded by system
personnel. Use of this system evidences an express consent to such
monitoring and agreement that if such monitoring reveals evidence of
possible abuse or criminal activity, system personnel may provide the
results of such monitoring to appropriate officals.^C
!
line con 0
exec-timeout 30 0
privilege level 0
login local
line aux 0
line vty 0 4
access-class 23 in
privilege level 0
login local
transport input none
line vty 5 15
access-class 23 in
privilege level 0
login local
transport input none
!
ntp clock-period 17178133
ntp server 172.17.2.1 prefer
end

Above is the internal Lan router setup. I have a switch attached to ip 172.17.1.1 int fa0/1. My problem lies somewhere in here, I think? Can anyone help? Thanks

I use tracert to get an idea of where the packets are going output below...

Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Users\Gary>tracert www.mysite.org

Tracing route to www.mysite.org [xxx.xxx.xxx.xxx]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  172.17.1.1
  2     1 ms    <1 ms     1 ms  xxx-xxx-xxx-xxx-NewEngland.hfc.comcastbusiness.net
[xxx.xxx.xxx.xxx]

Trace complete.

C:\Users\Gary>tracert www.myothersite.net

Tracing route to www.myothersite.net [xxx.xxx.xxx.xxx]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  172.17.1.1
  2     1 ms    <1 ms    <1 ms  xxx-xxx-xxx-xxx-NewEngland.hfc.comcastbusiness.net
[xxx.xxx.xxx.xxx]

Trace complete.

C:\Users\Gary>tracert 10.10.10.3

Tracing route to 10.10.10.3 over a maximum of 30 hops

  1    <1 ms    <1 ms    <1 ms  172.17.1.1
  2     1 ms    <1 ms    <1 ms  172.17.2.1
  3     1 ms     1 ms     1 ms  10.10.10.3

Trace complete.

C:\Users\Gary>

My question was solved by Eric in the Virtualmin Forums. This problem was not a Cisco programming problem, but it does shed light on how packets move about in a router.

https://www.virtualmin.com/node/14534

Thanks for putting up with me!