[cisco] Cisco 2811

am un 2811 care ar trebui sa faca 3 lucruri simple:
 - NAT - done
 - mapare de porturi pt un sistem de videoconferinta - partial
 - un tunel IPSEC cu un alt echipament necunoscut - not yet

In spate e un sistem de videoconferinta care se comporta ciudat, astfel dc
eu initiez conferinta totul merge perfect. Dc cineva de afara incearca sa
initieze videoconferinta, imi ajunge apelul pana in echipamentul de
conferinta dar se intreurpere imediat.
Pt videoconferinta sunt mapate urmatoarele porturi 1720, 1731, 3230-3253,
atat tcp cat si udp

---------------------         code ------------------------------------
ip nat inside source list 122 interface FastEthernet0/0 overload
ip nat inside source static tcp 192.168.0.249 1720 86.125.4.29 1720
extendable
ip nat inside source static tcp 192.168.0.249 1731 86.125.4.29 1731
extendable
ip nat inside source static tcp 192.168.0.249 3230 86.125.4.29 3230
extendable
ip nat inside source static udp 192.168.0.249 3230 86.125.4.29 3230
extendable
ip nat inside source static tcp 192.168.0.249 3231 86.125.4.29 3231
extendable
ip nat inside source static udp 192.168.0.249 3231 86.125.4.29 3231
extendable
ip nat inside source static tcp 192.168.0.249 3232 86.125.4.29 3232
extendable
ip nat inside source static udp 192.168.0.249 3232 86.125.4.29 3232
extendable
ip nat inside source static tcp 192.168.0.249 3233 86.125.4.29 3233
extendable
ip nat inside source static udp 192.168.0.249 3233 86.125.4.29 3233
extendable
ip nat inside source static tcp 192.168.0.249 3234 86.125.4.29 3234
extendable
ip nat inside source static udp 192.168.0.249 3234 86.125.4.29 3234
extendable
ip nat inside source static tcp 192.168.0.249 3235 86.125.4.29 3235
extendable
ip nat inside source static udp 192.168.0.249 3235 86.125.4.29 3235
extendable
ip nat inside source static tcp 192.168.0.249 3236 86.125.4.29 3236
extendable
ip nat inside source static udp 192.168.0.249 3236 86.125.4.29 3236
extendable
ip nat inside source static tcp 192.168.0.249 3237 86.125.4.29 3237
extendable
ip nat inside source static udp 192.168.0.249 3237 86.125.4.29 3237
extendable
ip nat inside source static tcp 192.168.0.249 3238 86.125.4.29 3238
extendable
ip nat inside source static udp 192.168.0.249 3238 86.125.4.29 3238
extendable
ip nat inside source static tcp 192.168.0.249 3239 86.125.4.29 3239
extendable
ip nat inside source static udp 192.168.0.249 3239 86.125.4.29 3239
extendable
ip nat inside source static tcp 192.168.0.249 3240 86.125.4.29 3240
extendable
ip nat inside source static udp 192.168.0.249 3240 86.125.4.29 3240
extendable
ip nat inside source static tcp 192.168.0.249 3241 86.125.4.29 3241
extendable
ip nat inside source static udp 192.168.0.249 3241 86.125.4.29 3241
extendable
ip nat inside source static tcp 192.168.0.249 3242 86.125.4.29 3242
extendable
ip nat inside source static udp 192.168.0.249 3242 86.125.4.29 3242
extendable
ip nat inside source static tcp 192.168.0.249 3243 86.125.4.29 3243
extendable
ip nat inside source static udp 192.168.0.249 3243 86.125.4.29 3243
extendable
ip nat inside source static tcp 192.168.0.249 3244 86.125.4.29 3244
extendable
ip nat inside source static udp 192.168.0.249 3244 86.125.4.29 3244
extendable
ip nat inside source static tcp 192.168.0.249 3245 86.125.4.29 3245
extendable
ip nat inside source static udp 192.168.0.249 3245 86.125.4.29 3245
extendable
ip nat inside source static tcp 192.168.0.249 3246 86.125.4.29 3246
extendable
ip nat inside source static udp 192.168.0.249 3246 86.125.4.29 3246
extendable
ip nat inside source static tcp 192.168.0.249 3247 86.125.4.29 3247
extendable
ip nat inside source static udp 192.168.0.249 3247 86.125.4.29 3247
extendable
ip nat inside source static tcp 192.168.0.249 3248 86.125.4.29 3248
extendable
ip nat inside source static udp 192.168.0.249 3248 86.125.4.29 3248
extendable
ip nat inside source static tcp 192.168.0.249 3249 86.125.4.29 3249
extendable
ip nat inside source static udp 192.168.0.249 3249 86.125.4.29 3249
extendable
ip nat inside source static tcp 192.168.0.249 3250 86.125.4.29 3250
extendable
ip nat inside source static udp 192.168.0.249 3250 86.125.4.29 3250
extendable
ip nat inside source static tcp 192.168.0.249 3251 86.125.4.29 3251
extendable
ip nat inside source static udp 192.168.0.249 3251 86.125.4.29 3251
extendable
ip nat inside source static tcp 192.168.0.249 3252 86.125.4.29 3252
extendable
ip nat inside source static udp 192.168.0.249 3252 86.125.4.29 3252
extendable
ip nat inside source static tcp 192.168.0.249 3253 86.125.4.29 3253
extendable
ip nat inside source static udp 192.168.0.249 3253 86.125.4.29 3253
extendable
!
access-list 122 deny ip 192.168.0 0.0.0.255 172.16.1.0 0.0.0.255
access-list 122 permit ip 192.168.0.0 0.0.0.255 any
--------------------------- end code -----------------------------


am vazut prin configuratie si urmatoarea linie:
  ip forward-protocol nd
oare ar fi mai bine/ar merge daca ar fi de tip UDP.

Ar mai trebui sa fie si un tunel ipsec, ceva de genul:
-------------------------------- code -----------------------------
crypto isakmp policy 100
 encr 3des
 hash md5
 group 2
!
crypto isakmp client configuration group NUME1
 key <parola>
!
!
crypto ipsec transform-set VPN_1 esp-3des esp-md5-hmac
!
crypto map myvpn 10 ipsec-isakmp
 ! Incomplete
 set peer <ip>
 set transform-set VPN_1
 match address 101
!
ip nat inside source static 192.168.0.0 255.255.255.0 <ip_ext> route-map
nonat
route-map nonat permit 10
 match ip address 122
----------------- end code ---------------------------------

ce imi scapa?







_______________________________________________
cisco mailing list
[email protected]
http://lists.lug.ro/mailman/listinfo/cisco