|
|
|
|
|
Posted by Grant on May 20, 2008, 6:41 am
If you were Registered and logged in, you could reply and use other advanced thread options
I want to run a http server on my local lan , but accessible via the
internet.
My existing ethernet1 interface is ip nat outside but to do this, would
I also have to make it ip nat inside as well ?
I already configured ip http server, what else do I have to do ?
thanks
GC
|
 
| |
Posted by Shishko on May 20, 2008, 7:35 am
If you were Registered and logged in, you could reply and use other advanced thread options
On Tue, 20 May 2008 22:41:44 +1200, Grant wrote:
> I want to run a http server on my local lan , but accessible via the
> internet.
> My existing ethernet1 interface is ip nat outside but to do this, would
> I also have to make it ip nat inside as well ?
>
> I already configured ip http server, what else do I have to do ?
>
>
> thanks
>
> GC
ip http server means you can access you ROUTER OR FIREWALL via http, not
internal server... Is it router or firewall you have? What IOS version?
|
|
Posted by Scott Perry on May 21, 2008, 10:39 am
If you were Registered and logged in, you could reply and use other advanced thread options >I want to run a http server on my local lan , but accessible via the
>internet.
> My existing ethernet1 interface is ip nat outside but to do this, would I
> also have to make it ip nat inside as well ?
>
> I already configured ip http server, what else do I have to do ?
Forget "ip http server". That means that you are enabling the router to
provide a web page interface for administration. It has nothing to do with
what you are doing and should be disabled to maintain good security.
You are correct, in order to have NAT enabled you must have both an "ip nat
outside" and an "ip nat inside". You must also additionally create an
access-list, perhaps a standard IP access-list, to specify the range of
hosts which can use NAT and what external/global IP address to use in NAT.
Add this global configuration command after creating an access-list (I used
101 as an example):
ip nat inside source list 101 interface Ethernet0 overload
Now that NAT is running, you must make a static translation for certian
traffic coming in from the outside to be redirected to your inside host. In
my example, I specified that HTTP traffic, also known as TCP port 80, is
redirected to my example server of 192.168.1.5. Since the ourside router
interface is using DHCP, I left the external/global IP address out and
instead specified the interface:
ip nat inside source static tcp 192.168.1.5 80 interface Ethernet0 80
REVIEW:
This is how you enable NAT on a router:
specify an access-list for the range of hosts to use NAT
enter "ip nat inside" and "ip nat outside" on the appropriate interfaces
enter the IP NAT command to bind the access-list of inside hosts and the
outside interface
(optional) put any inbound TCP/UDP port translations in place to redirect
inbound traffic to an inside server
-----
Scott Perry
Indianapolis, IN
|
| Similar Threads | Posted | | Learn subnetting at http://easysubnet.com | January 23, 2008, 5:25 am |
| ccna links updated at: http://tinyurl.com/2bkdug | May 6, 2007, 4:04 am |
| http://www.cert-start.com ~ starting point for your certifications | September 26, 2008, 9:47 am |
| http://www.certdisk.com VOICE + RS valuable collection of all my CCIE Materials! | June 5, 2008, 11:31 pm |
| CCNA links updated at: http://tech.groups.yahoo.com/group/ccna-exams pass on... | April 24, 2007, 6:12 am |
| Web server | September 13, 2006, 10:44 am |
| pix + websense server | October 3, 2005, 2:57 pm |
| TFTP Server ? | April 11, 2006, 4:14 pm |
| email server & PIX question | March 31, 2005, 5:01 pm |
| SNMP server port | September 26, 2005, 1:15 pm |
|
|
Home Cabling Guide
Finally, an instantly downloadable book that saves you thousands in home improvement dollars!
Enjoy living in 21st century technology-advanced home while increasing its selling value and competitive advantage
on the real estate market. Whether your cabling is for home office or high-tech
leisure, you can wire your home yourself or learn "wirish" to speak with your cabling contractors in their language!
Learn More
|
NewsGroups 
Yahoo! 
Google 
Windows Live 
del.icio.us 
digg 
Netscape 
XML site map