Cisco 800 series: Difference between revisions

From NURDspace
No edit summary
No edit summary
 
(One intermediate revision by the same user not shown)
Line 11: Line 11:
= Port forwarding howto =
= Port forwarding howto =


Log in with root on 192.168.1.1
The router's interface is connected only to a separate management VLAN accessible only from the central router. You must first authenticate to it via SSH, then you may log in with root on 172.31.255.2.
 
Once you have an eco-stiwa prompt:
  enable
  enable
  show config
  show config

Latest revision as of 21:16, 1 April 2017

NURDs Inventory
NoPicture.png
Owner Space
Status Infrastructure
Hostname nurds-rtr-01
Location machine room
Tool
Tool category

{{{Name}}}Property "Tool Name" (as page type) with input value "{{{Name}}}" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process. Property "Tool Image" (as page type) with input value "File:{{{Picture}}}" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process. {{{Picture}}} {{{InventoryOwner}}}Property "Tool Owner" (as page type) with input value "{{{InventoryOwner}}}" contains invalid characters or is incomplete and therefore can cause unexpected results during a query or annotation process. machine room

Description

Our main router for internet access is a Cisco 800 series.

Port forwarding howto

The router's interface is connected only to a separate management VLAN accessible only from the central router. You must first authenticate to it via SSH, then you may log in with root on 172.31.255.2.

Once you have an eco-stiwa prompt:

enable
show config

Currently forwarded ports are listed in the lines beginning with "ip nat inside source static"

config terminal

Now add a new line similar to the existing ones, for example:

ip nat inside source static tcp <internal ip> <internal port> <external ip> <external port> extendable
<enter>
<ctrl>+z
write memory

Check your result with

show config

Remove existing port forwarding rules

Copy a rule from "show config" and paste "no" in front of it.