Configuring FTP on local IP Address

[dhavaltandel]

Hi Netpros,

I wanted to configure FTP server on private Ip Address Range as 192.xx.xx.xx/24. I do have one public IP.

So i wanted to forward the FTP request for port number 21 on that perticular Private Ip Address which is already configured with FTP Server and working fine locally.

Ii have Cisco 2621 with IOS 12.1

can any budy has the solution or provide me any link to resolve this issue.

Thanks,

Dhaval Tandel

[Edison Ortiz]

interface f0/0

description internal network

ip address 192.168.1.1 255.255.0

ip nat inside

interface fa0/1

description outside network

ip address 69.255.255.255 255.255.255.252

ip nat outside

ip nat inside source static tcp [local ip] 21 interface fa0/1 21

[dhavaltandel]

Hi

Thanks for taking interest..

I did try by above config but its not working i also do same for port number 80 but no any luck.....is there any thing else to do with this configuration...?

Thanks

Dhaval Tandel

[Edison Ortiz]

Can you post your config ?

[dhavaltandel]

Current configuration : 1997 bytes

!

version 12.1

no service single-slot-reload-enable

service timestamps debug uptime

service timestamps log uptime

service password-encryption

!

hostname IndiaVoiceRouter

!

logging buffered 16000 debugging

enable secret xxx

!

!

ip subnet-zero

ip host voicerouter 192.168.1.100

ip name-server 202.xx.xx.xx

ip name-server 202.xx.xx.xx

ip dhcp database tftp://192.168.1.13/dhcp-lease

ip dhcp excluded-address 192.168.1.100

!

ip dhcp pool 192.168.1.0/24

network 192.168.1.0 255.255.255.0

default-router 192.168.1.100

dns-server 202.xx.xx.xx 202.xx.xx.xx

lease 333

!

!

!

interface FastEthernet0/0

ip address 61.xx.xx.xx 255.255.255.0

no ip redirects

ip nat outside

duplex auto

speed auto

!

interface FastEthernet0/1

ip address 192.168.1.100 255.255.255.0

ip nat inside

duplex auto

speed auto

!

ip default-gateway 61.xx.xx.xx

ip nat pool dhara 61.xx.xx.xx 61.xx.xx.xx netmask 255.255.255.0

ip nat inside source list 3 pool dhara overload

ip nat inside source static tcp 192.168.1.11 80 interface FastEthernet0/0 80

ip nat inside source static tcp 192.168.1.11 21 interface FastEthernet0/0 21

ip classless

ip route 0.0.0.0 0.0.0.0 61.xx.xx.xx

no ip http server

!

logging 192.168.1.13

access-list 3 permit 192.168.1.0 0.0.0.255

access-list 121 permit tcp any any range ftp-data ftp

access-list 121 permit tcp any any eq www

!

line con 0

line aux 0

line vty 0 4

password xxx

login

!

end

IndiaVoiceRouter#

[dhavaltandel]

HI

Additionally both the ACL-121 has been removed now....

Thanks

Dhaval Tandel

[dhavaltandel]

Any Luck...?

[Edison Ortiz]

Can you turn a debug ip nat and see if the address is getting translated ?

Also, since you have a pool of public IPs, why don't you take a public IP from the pool and do a static assignment instead of using the Fa0/0 interface ?

[dhavaltandel]

HI

Thnaks fo rtakin interest...

I did replace with public ip instade of fa0/0.

my debug is on bu i cant see any messages on terminal...

am not getting this...

Thanks

Dhaval Tandel

[Edison Ortiz]

You won't see the messages on terminal unless you typed 'term mon'. You should be able to see the message in the log by typing 'show log'.

The command is

#debug ip nat detailed

[devang_etcom]

dhaval add only extendable keyword

ip nat inside source static tcp localIP 21 globalIP address 21 extendable

and let me know it works or not

please rate this post if it helps

regards

Devang

[rajinikanth]

Hi dhaval,

use this command

ip nat service list ftp tcp command.

Note:The access list address in the above command must match the inside local IP address for the FTP server .

!

access-list 10 permit 192.168.1.11

!

!

ip nat service list 10 ftp tcp port 21

ip nat inside source static 192.168.1.11 interface FastEthernet0/0

!

Tell me if it worked

Thanks

Raj

[dhavaltandel]

HI, RAJ

Thasks but no any luck yet...

i think you saw my last post for statics can you recognise why that...?

Thanks,

Dhaval Tandel

[Edison Ortiz]

Dhaval,

Can we see the #debug ip nat detailed

output ?

[devang_etcom · Accepted solution]

and dhaval you can use same thing for port 80 for website

rate this post if it helps

regards

Devang