Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

837 router - ip nat problem

hi,

I have this line in my router,

ip nat inside source static tcp 192.168.76.5 21 interface Dialer1 21

and it works just fine. now I want to do the same thing with ssh, when someone tries to connect to the outside interface using port 22 I want it to be forwareded to the server on port 22 but no success.

ip nat inside source static tcp 192.168.76.5 22 interface Dialer1 22

I also have this right now in my dialer 1 interface but still not working

ip access-group 101 in

access-list 101 permit ip any any

any ideas?

thank you.

3 REPLIES
Purple

Re: 837 router - ip nat problem

Hi,

Can you attempt to establish an SSH session and then capture the output of 'sh ip nat translations' ?

Paresh

New Member

Re: 837 router - ip nat problem

it works now, the same command works.

now I'm having troubles with ftp,

I have access-list 101 permit ip any any

with

ip nat inside source static tcp 192.168.76.5 21 interface Dialer1 21

my ftp connectio works but when I do ls(dir) to see the content it hangs.

I've tried this

ip nat inside source static udp 192.168.76.5 20 interface Dialer1 20

ip nat inside source static tcp 192.168.76.5 20 interface Dialer1 20

but no success, any ideas?

thanks.

Purple

Re: 837 router - ip nat problem

You will certainly need the following 2 lines:

ip nat inside source static tcp 192.168.76.5 20 interface Dialer1 20

ip nat inside source static tcp 192.168.76.5 21 interface Dialer1 21

Can you make sure that the FTP client you are using is configured for Active mode ?

Hope that helps - pls rate the post if it does.

Paresh

107
Views
0
Helpful
3
Replies