Posté le: Sam Sep 06, 2008 9:37 am Sujet du message: NAT qui disparaît
Bonjour,
trouvant notre routeur Linksys un peu léger pour 30 postes + un serveur SBS et 1 IP externe (Orange, PPPoE) j'ai voulu migrer Livebox + Linksys vers un SOHO97 et passé les premiers soucis de saturation de la table NAT en modifiant les timeouts, j'ai maintenant un souci avec le port 443 dont la NAT vers le serveur SBS disparait après quelques heures.
La commande "sh ip nat tr" n'affiche plus la ligne :
Code:
Pro Inside global Inside local Outside local Outside global
...
tcp 217.xxx.xxx.xxx:443 192.168.100.2:443 --- ---
...
En retapant
ip nat inside source static tcp 192.168.100.2 443 interface Dialer1 443
la NAT refonctionne à nouveau.
Pas de pb sur les autres ports forwardés vers SBS.
La config :
Code:
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname gw-ma
!
boot-start-marker
boot-end-marker
!
enable secret 5 ...
enable password ....
!
username .... privilege 15 secret 5 ...
ip subnet-zero
ip name-server 192.168.100.2
!
!
ip ssh time-out 60
ip ssh version 2
no aaa new-model
!
!
!
no crypto isakmp enable
!
partition flash 2 7 1
!
!
!
!
interface Ethernet0
ip address 192.168.100.1 255.255.255.0
ip nat inside
ip tcp adjust-mss 1452
hold-queue 100 out
!
interface ATM0
no ip address
no atm ilmi-keepalive
pvc 8/35
pppoe-client dial-pool-number 1
!
dsl operating-mode auto
hold-queue 224 in
!
interface Dialer1
ip address negotiated
ip mtu 1492
ip nat outside
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication pap callin
ppp chap hostname fti/....
ppp chap password 0 ....
ppp pap sent-username sohodyn password 7 ....
!
ip nat translation timeout 300
ip nat translation tcp-timeout 300
ip nat translation udp-timeout 60
ip nat translation finrst-timeout 300
ip nat translation syn-timeout 15
ip nat translation dns-timeout 30
ip nat translation icmp-timeout 5
ip nat translation port-timeout tcp 80 60
ip nat translation port-timeout tcp 110 60
ip nat translation max-entries 5000
ip nat inside source list 101 interface Dialer1 overload
ip nat inside source static tcp 192.168.100.2 3389 interface Dialer1 3389
ip nat inside source static tcp 192.168.100.2 4125 interface Dialer1 4125
ip nat inside source static tcp 192.168.100.2 1723 interface Dialer1 1723
ip nat inside source static tcp 192.168.100.2 53 interface Dialer1 53
ip nat inside source static udp 192.168.100.2 53 interface Dialer1 53
ip nat inside source static tcp 192.168.100.2 25 interface Dialer1 25
ip nat inside source static tcp 192.168.100.2 443 interface Dialer1 443
no ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
no ip http server
no ip http secure-server
!
!
access-list 101 permit ip 192.168.100.0 0.0.0.255 any
snmp-server community ..... RO
snmp-server enable traps tty
!
control-plane
!
!
line con 0
exec-timeout 0 0
no modem enable
transport preferred all
transport output all
stopbits 1
line aux 0
transport preferred all
transport output all
stopbits 1
line vty 0 4
access-class 1 in
exec-timeout 0 0
login local
transport preferred ssh
transport input telnet ssh
transport output all
!
scheduler max-task-time 5000
sntp server 213.186.41.134
!
end
Inscrit le: 19 Jan 2007 Messages: 14 Localisation: Nord France
Posté le: Sam Sep 06, 2008 9:46 am Sujet du message:
Bonjour,
quelle est ta version exacte d'IOS, moi je tenterais en premier de le mettre à la toute dernière version en GD si tu as encore le pbl tu essaye la dernière version en ED
Posté le: Sam Sep 06, 2008 9:58 am Sujet du message:
Bonjour,
le routeur est visiblement un peu ancien :
Code:
Cisco IOS Software, SOHO97 Software (SOHO97-K9OY1-M), Version 12.3(4)T4, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2004 by Cisco Systems, Inc.
Compiled Thu 11-Mar-04 22:31 by eaarmas
ROM: System Bootstrap, Version 12.2(8r)YN, RELEASE SOFTWARE (fc1)
gw-ma uptime is 1 day, 1 hour, 5 minutes
System returned to ROM by power-on
System restarted at 06:54:45 UTC Fri Sep 5 2008
System image file is "flash:soho97-k9oy1-mz.123-4.T4.bin"
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
Cisco SOHO97 (MPC857DSL) processor (revision 0x400) with 29492K/3276K bytes of memory.
Processor board ID AMB082903ZR (1694165646), with hardware revision 0000
CPU rev number 7
1 Ethernet interface
1 ATM interface
128K bytes of NVRAM.
7168K bytes of processor board System flash partition 1 (Read/Write)
1024K bytes of processor board System flash partition 2 (Read/Write)
2048K bytes of processor board Web flash (Read/Write)
Configuration register is 0x2102
Les dernières versions demandent trop de mémoire pour ce modèle...
Et de toute façon pas moyen de les récupérer sur le site de Cisco...
Si quelqu'un a un accès, je suis preneur pour un IOS compatible.
Vous ne pouvez pas poster de nouveaux sujets dans ce forum Vous ne pouvez pas répondre aux sujets dans ce forum Vous ne pouvez pas éditer vos messages dans ce forum Vous ne pouvez pas supprimer vos messages dans ce forum Vous ne pouvez pas voter dans les sondages de ce forum
NAT qui disparaît
