configuration routeur Cisco - protocole SIP

Bonjour, je voudrais configurer un routeur cisco 877, pour heberger un serveur web (mail, ftp, http) sur mon réseau avec une ip fixe, j'arrive à aller sur le net, je pense avoir bien configuré le nat pour rediriger les port 80 du routeur (interface externe) vers le serveur web en internet 192.168.1.254, si quelqun à une procedure ou de l'aide, je serais preneur araoudiou@propc.fr.


merci d'avance

apparement tu as configurer ton routeur, alors quel est le problème exact ??

Tu peux mettre ta config STP pour que je puisses voir le boulot déjà fais ?

voici ma config

Building configuration...

Current configuration : 4984 bytes
!
! Last configuration change at 13:15:05 PCTime Sun Apr 16 2006 by admin
! NVRAM config last updated at 12:55:51 PCTime Sun Apr 16 2006 by cisco
!
version 12.3
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
!
hostname ROUTEUR877
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 3 log
security passwords min-length x
logging buffered 51200 debugging
logging console critical
enable secret 5 xxxxx
!
username admin privilege 15 secret 5 xxxxx
clock timezone PCTime 1
clock summer-time PCTime date Mar 30 2003 2:00 Oct 26 2003 3:00
no aaa new-model
ip subnet-zero
no ip source-route
ip cef
!
!
ip dhcp excluded-address 10.10.10.1 10.10.10.9
ip dhcp excluded-address 10.10.10.251 10.10.10.254
!
ip dhcp pool sdm-pool1
import all
network 10.10.10.0 255.255.255.0
dns-server 212.27.54.252 212.27.53.252
default-router 10.10.10.1
!
!
ip tcp synwait-time 10
no ip bootp server
ip domain name propc.fr
ip name-server 212.27.54.252
ip name-server 212.27.53.252
ip ssh time-out 60
ip ssh authentication-retries 2
ip inspect name DEFAULT100 cuseeme
ip inspect name DEFAULT100 ftp
ip inspect name DEFAULT100 h323
ip inspect name DEFAULT100 icmp
ip inspect name DEFAULT100 netshow
ip inspect name DEFAULT100 rcmd
ip inspect name DEFAULT100 realaudio
ip inspect name DEFAULT100 rtsp
ip inspect name DEFAULT100 esmtp
ip inspect name DEFAULT100 sqlnet
ip inspect name DEFAULT100 streamworks
ip inspect name DEFAULT100 tftp
ip inspect name DEFAULT100 tcp
ip inspect name DEFAULT100 udp
ip inspect name DEFAULT100 vdolive
ip ips po max-events 100
no ftp-server write-enable
!
!
!
!
!
!
!
interface ATM0
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip route-cache flow
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.1 point-to-point
description $ES_WAN$$FW_OUTSIDE$
ip address 82.x.x.x 255.255.255.0
ip access-group 101 in
ip verify unicast reverse-path
ip nat outside
ip inspect DEFAULT100 out
ip virtual-reassembly
pvc 8/36
encapsulation aal5mux ip
!
!
interface FastEthernet0
no ip address
no cdp enable
!
interface FastEthernet1
no ip address
no cdp enable
!
interface FastEthernet2
no ip address
no cdp enable
!
interface FastEthernet3
no ip address
no cdp enable
!
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$$FW_INSIDE$
ip address 10.10.10.1 255.255.255.0
ip access-group 100 in
no ip redirects
no ip unreachables
no ip proxy-arp
ip nat inside
ip virtual-reassembly
ip route-cache flow
ip tcp adjust-mss 1452
!
ip classless
ip route 0.0.0.0 0.0.0.0 ATM0.1
!
!
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 5 life 86400 requests 10000
ip nat inside source list 1 interface ATM0.1 overload
ip nat outside source static tcp 82.x.x.x 80 10.10.10.10 80 extendable
!
logging trap debugging
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark SDM_ACL Category=2
access-list 1 permit 10.10.10.0 0.0.0.255
access-list 100 remark auto-generated by Cisco SDM Express firewall configuration
access-list 100 remark SDM_ACL Category=1
access-list 100 deny ip 82.x.x.0 0.0.0.255 any
access-list 100 deny ip host 255.255.255.255 any
access-list 100 deny ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
access-list 101 remark auto-generated by Cisco SDM Express firewall configuration
access-list 101 remark SDM_ACL Category=1
access-list 101 permit tcp any host 82.x.x.x eq www
access-list 101 permit udp host 212.27.53.252 eq domain host 82.x.x.x
access-list 101 permit udp host 212.27.54.252 eq domain host 82.x.x.x
access-list 101 deny ip 10.10.10.0 0.0.0.255 any
access-list 101 permit icmp any host 82.x.x.x echo-reply
access-list 101 permit icmp any host 82.x.x.x time-exceeded
access-list 101 permit icmp any host 82.x.x.x unreachable
access-list 101 deny ip 10.0.0.0 0.255.255.255 any
access-list 101 deny ip 172.16.0.0 0.15.255.255 any
access-list 101 deny ip 192.168.0.0 0.0.255.255 any
access-list 101 deny ip 127.0.0.0 0.255.255.255 any
access-list 101 deny ip host 255.255.255.255 any
access-list 101 deny ip host 0.0.0.0 any
access-list 101 deny ip any any
no cdp run
!
!
control-plane
!
banner login ^CAuthorized access only!
Disconnect IMMEDIATELY if you are not an authorized user!^C
!
line con 0
login local
no modem enable
transport preferred all
transport output telnet
line aux 0
login local
transport preferred all
transport output telnet
line vty 0 4
privilege level 15
login local
transport preferred all
transport input telnet ssh
transport output all
!
scheduler max-task-time 5000
scheduler allocate 4000 1000
scheduler interval 500
end


merci d'avance

le probleme exacte est que je voudrais diriger un nat le port 80 de mon adresse ip 82.x.x.x vers le port interne de mon serveur web 192.168.1.254, lorsque je fait un nat, il semble que ce soit l'interface du routeur ethernet qui prend l'adresse de la translation et donc il en resulte un conflit d'IP

Bonjour,

au niveau de ton Nat tu as mis en place un " ip nat outside " qui n'est pas du tout adapté pour ton utilisation

il vaut mieux ajouter cette commande :

ip nat inside source static tcp <ip interne> <port_tcp> <ip_externe(wan routeur)> <port_tcp>

Ex : ip nat inside source static tcp 10.10.10.10 80 82.225.54.38 80

PS : c'est peut être un peu tard comme réponse ... mais bon ca pourra tjs servir