×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Only permit one Web session conection.

Unanswered Question
Jun 8th, 2014
User Badges:

 

Hi I configured the cisco to get with a static NAT to reach my internal WEB server at adress 10.10.10.231, from outside. It is well configured. I have a registered domain , and pings works allways ,(from outside the lan ) reach the router. The problem come when I use either IE or firefox, write my domain I can open the WEB page properly. But is occurs only one time.

If a close the session and try  again, I can´t. The page is in blank.!! or open try to the web from another computer , I can´t see it.

The only way is to stop / start the web service and I can access again, buy again only one time... !!

To check if was a problem of WEB server I installed apache and IIS .. so there is not a problem with the WEB software. Internally in my LAN  I can open the WEB page properly , not only one time..

is something missing into the cisco router conf to cause this problem

There is no firewall at all to avoid drop problems.

any idea??help ??

thanks a  lot mates!

Jesus

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Vasilii Mikhail... Mon, 06/09/2014 - 07:37
User Badges:
  • Gold, 750 points or more

Hello.

Could you please provide your configuration for NAT and internal/external interfaces?

Could you please show NAT stat and translations during the issue?

jesus dedios Tue, 06/10/2014 - 01:36
User Badges:

ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 10.10.10.231 80 interface Dialer0 80
ip route 0.0.0.0 0.0.0.0 Dialer0
!
access-list 1 permit 10.10.10.0 0.0.0.255
access-list 23 permit 10.10.10.0 0.0.0.255
access-list 23 permit any
access-list 100 remark desde fuera
access-list 100 remark CCP_ACL Category=1
access-list 100 permit tcp any any eq www
access-list 100 permit ip any any
access-list 101 remark CCP_ACL Category=4
access-list 101 permit ip 10.10.10.0 0.0.0.255 any
access-list 101 permit ip 10.10.20.0 0.0.0.255 any
dialer-list 1 protocol ip permit

 

paul driver Tue, 06/10/2014 - 02:17
User Badges:
  • Green, 3000 points or more

Hello

can you try post the output of these show commands

deb ip nat detail
sh ip nat trans

and possibly try and use these static nat static instead.
ip nat inside source static tcp 10.10.10.231 80 (public ip) 80 extendable
 

 

 

res

Paul

Actions

This Discussion