Hello,
I have a Dynamic Point-to-Multipoint VPN setup and i am having
troubles. I can ping hosts on each side from each other but the server
on one side can not be accessed. You can not ping the servers ip or
ping from the server. Is this a NAT problem or an Access-List Problem?
The follwing are the access commands on the router on the same side as
the troubled server.
the ip address for the server i am having troubles with is 10.0.0.20
ip nat inside source route-map nonat interface FastEthernet0 overload
ip nat inside source static tcp 10.0.0.20 25 interface FastEthernet0 25
ip nat inside source static tcp 10.0.0.20 80 interface FastEthernet0 80
ip nat inside source static tcp 10.0.0.20 3389 interface FastEthernet0
3389
!
access-list 100 permit udp any host 209.216.132.XXX eq isakmp
access-list 100 permit esp any host 209.216.132.XXX
access-list 100 permit gre any host 209.216.132.XXX
access-list 100 permit tcp host 66.59.166.5 any eq smtp
access-list 100 permit tcp host 216.240.0.XXX any eq smtp
access-list 100 deny tcp any any eq smtp
access-list 100 permit tcp any any
access-list 100 permit ip any any
access-list 100 permit udp any any
access-list 100 deny ip any any
access-list 110 permit ip 10.0.0.0 0.0.0.255 any
access-list 110 permit ip any 10.0.0.20 0.0.0.255 log
!
!
!
route-map nonat permit 10
match ip address 110
Thanks,
Adam Walters
|