"Loopback" or "reverse NAT" on EA2700 / DB N600

I'm having some trouble finding the right setting on the included tools - I'm familiar with how to do it in ddwrt but don't want to change from stock on this one.
What I have is that I want to be able to access certain ports via my public IP address (Instead of local network address) from within my house. For example, internal address is 192.168.1.125 to point to a given device, and I have it mapped out on the public IP address - (fake IP) 129.252.67.60:8080 to point to that device. I can access that public IP address fine from outside of my home network, but if I try to do so while connected to my home network, it will not connect. (Of course, I can connect to 192.168.1.125 fine from my home network.)
From what I recall and have read, I need to turn on "loopback" or "reverse NAT" somehow to let the router know to point the external IP address request right back...
If anyone has any advice/fixes, I would greatly appreciate it - I have settings on my computer/tablet that I would prefer to not have to keep two separate versions of (One for external networks, one for internal networks) if it can be avoided.
Thanks in advance,
-l

Ensure the box "Filter Internet NAT redirection" IS CHECKED on the security tab. Selecting the checkbox and saving worked for me to get Loopback within my network

Similar Messages

Reverse Natting on asa 8.2

Hi All,
I am currently trying to apply a reverse NAT on asa 8.2 and not sure how to do this. I have done this on asdm 6.2 for asa 8.3 but the options are not simiar on 8.2. Is there a CLI equivelant?
I am trying to Achieve the object below
for any traffic coming from outside interface to the inside interface with any source address to destination 10.X.X.58 then translate it so that it become 192.X.X.X to address 192.X.X.58. This is so that communications can traverse internal network as the server is not ona DMZ.
I have done this on 8.3 (shown below) but do not know if it is possible for 8.2, I have tried replicating the same command on 8.2 but commands are not recognised.
nat (outside,any) source static any 192.X.X.X destination static 10.X.X.X 192.X.X.58
Should I just upgrade to 8.3? never done it before so not sure of the consequences.
Any advise appreciated!

Zahan,
You can actually do it on 8.2 but not for "any" interface. Let's put the sample for outside to inside.
access-list pnat permit ip any host 10.X.X.X
nat (outside) 40 access-list pnat outside
global (inside) 40 192.X.X.X
static (inside,outside) 192.X.X.58 10.X.X.X
Off course NAT on 8.3/8.4 is more flexible than 8.2 so if you can upgrade your ASA it will a good option.
Luis Silva

NAT loopback

Hi
I have Cisco 880 (Version 15.0(1)M6) router and have problems with accessing internal server using external IP (as far as I found it is called “NAT loopback or reverse NAT”). It works well on cheap Linksys RV082 but can’t get it works on mine device. I have only one external IP address.
I read somewhere that it is not possible.
Could you confirm this or there is a way to get it run?

Hi.
What you are looking to do is perform REVERSE PORT ADDRESS TRANSLATION.
People call it all sorts of crazy things like: NAT Hairpinning, NAT-on-a-stick, NAT reflecting, and NAT loopback.
Just to clear this up,.. Hairpinning is a technique used in a NAT-on-a-stick configuration that involves having the NAT "loopback" the traffic. This sounds like what you want, but is very likely NOT what you want. These configuration in their simple form have only one interface. They practically turn a router into a NAT server to a switched network.
It is difficult to get to these kind of questions using Google, so I will rephrase:
If you cannot reach an internal server using the GLOBAL IP address and port, then this post is FOR YOU!
You have to configure another type of NAT called NVI instead of traditional NAT.
To configure NAT NVI you substitute:
ip nat outside or ip nat inside for ip nat enable in interface configuration mode.
ip nat inside source static a.b.c.d xx int fa0 yy for ip nat source static a.b.c.d xx int fa0 yy in global configuration mode.
ip nat source route-map NAT_MAP interface Dialer1 overload for ip nat inside source route-map NAT_MAP interface Dialer1 overload in global configuration mode.
Now, you should be able to access your web server from the LAN using the GLOBAL IP ADDRESS.
This is GREAT, right ?! Not so if you have a dynamic IP address, because as soon the router reboots, it will start up, and the NAT entries will be classical NAT entries instead of NVI entries. This breaks "port forwarding" in general, so I wrote a script to re-enter the statements as soon as the interface is placed in up status. I'm just going to leave this here, and if anybody needs help feel free to ask.
(BTW, you can tell this is happening to you if you have ip nat source static ... statements visible in the output of show ip nat translations instead of ip nat nvi translations.)
The script is available here:
https://github.com/vittorio88/cisco-scripts/blob/master/fix_nvi.tcl
Save it, and copy to the router. Look inside the file for how configure IOS to use the script.
Good Luck!
P.S. Enabling NVI makes your router take a slight performance hit. This may be more notable on older routers or 800 series.

Question regarding NAT and directed-mode

Hello,
I have two WAE 574 devices and a CM 274 all running code level 4.3.1.6, The CM is behind a PIX firewall. There is no firewall between the branch and core WAE. The branch device is behind a NAT router. The CM and SSL ASA rea behind a PIX 515 firewall. The branch WAE is running inline mode and the core WAE is using WCCP redirection. Both the CM and SSL ASA are reverse NATted on the PIX firewall. The branch WAE has the primary interface unchecked on the CM and is using the NAT address.
I am getting asymmetric route issues. This is because for some reason the NAT address of the branch WAE sends the SYN which is responded to but the ACK is coming from the unnatted private address. When I turn off directed mode I can see optimisation start for some sessions but not for the SSL
ASA.
Example
Branch WAE Private 192.68.1.45
Branch WAE Public 206.99.88.10
CM private 192.168.20.9
CM public 240.10.10.20
PIX log
an 15 2012 11:50:58: %PIX-6-106015: Deny TCP (no connection) from 192.68.1.45/46871 to 240.10.10.20/443 flags PSH ACK on interfe
Although the PIX NATs the CM address, the core WAE is still still seeing it's private address.
Do you have any idea what could be causing this ?
Best regards
Stephen
Jan 15 2012 11:51:12: %PIX-5-106100: access-list DMZ_access_in denied tcp DMZ/192.168.20.9(443) -> outside/206.99.88.10(46871) hit-cnt 1 f]
Jan 15 2012 11:51:31: %PIX-6-106015: Deny TCP (no connection) from 192.68.1.45/46871 to 240.10.10.20/443 flags PSH ACK on interfe
Jan 15 2012 11:51:37: %PIX-6-106015: Deny TCP (no connection) from 192.68.1.45/46847 to 240.10.10.20/443 flags PSH ACK on interfe
Jan 15 2012 11:52:08: %PIX-6-106015: Deny TCP (no connection) from 192.68.1.45/49634 to 240.10.10.20/443 flags PSH ACK on interfe
Jan 15 2012 11:52:10: %PIX-5-106100: access-list outside_access_in permitted tcp outside/206.99.88.10(23183) -> DMZ/240.10.10.20(443) ]
Jan 15 2012 11:52:10: %PIX-6-302013: Built inbound TCP connection 1475554768 for outside:206.99.88.10/23183 (206.99.88.10/23183) to DMZ:WAD)
Jan 15 2012 11:52:10: %PIX-6-106015: Deny TCP (no connection) from 192.68.1.45/23183 to 240.10.10.20/443 flags ACK on interface e

Hi Stephen,
To troubleshoot this further, we would need to get a topology diagram of your network, as well as the configurations from all devices, so it would probably be better if you open a TAC service request.
Regards
Daniel

How to stop our SPG504G's from trying tftp?

Hi Folks,
I'm going a little insane here - hoping someone can suggest a fix.
We have a few (10 or so) SPA504G phones in our NZ office, talking to a local cloud PABX mob. When we first set them up, I wasn't keen on statically configuring them all, given we have no IT support there, so I spent a couple of days playing, and ended up with the following:
1) Local DHCP server sets option 66 to http://ourserver.ourdomain.com/phones/nzphones/XMLDefault504G.cnf.xml
That contains:
<flat-profile><Resync_On_Reset>Yes</Resync_On_Reset><Resync_Periodic>10</Resync_Periodic><Profile_Rule>http://ourserver.outdomain.com/phones/nzphones/spa$MA.xml</Profile_Rule></flat-profile>
2) I have a PHP script handling all access to /nzphones/ which uses a template, and a local database, to take the MAC address and shove in all the relevant user-specific configuration - local ports (for reverse NAT), username, password, etc etc. I have the phones set to resync every 24 hours, so that any config updates I do only take 24 hours to get picked up, at the most.
That's all been working great for 6 months, except that one of the NZ staff happened to mention yesterday, that those reboots take about 15 minutes!
So I've been having a bit of a play, and it looks like the phones are initially ignoring the option 66, and trying to do TFTP to our DHCP server?!
Using TCPDump, I'm seeing lots of these:
192.168.64.114.1029 > 192.168.40.254.69: [udp sum ok] 50 RRQ "XMLDefault504G.cnf.xml" octet timeout 10 tsize 0
192.168.64.114.1029 > 192.168.40.254.69: [udp sum ok] 46 RRQ "XMLDefault.cnf.xml" octet timeout 10 tsize 0
I've been trawling through all the results in google, and youtube videos from cisco that I can find, but there's nothing overly in-depth to describe the exact configuration options I should be using..
Anyone happen to be doing something similar with their phones, and have figured this out?
Thanks,
Damien

At the first, don't use reserved file name XMLDefault504G.cnf.xml for your's customized configuration. Rename the file, change name in DHCP configuration.
XMLDefault504G.cnf.xml and XMLDefault.cnf.xml files are dedicated to SPCP mode configuration.
In advance, you can disable SPCP - add
SIP
to your configuration to disable SPCP autoconfiguration attempts.
Mark thread as answered if it solve your problem.

Managing remote C800 with the wireless controller

We have a number of regional offices throughout the country with a C800 as the Internet facing router and it is also our wireless.
We have a Cisco wireless controller in the Data Center an we need to manage\monitor all the C800, but the problem is that those remote sites
are not VPN'd nor part of our WAN network.
Which setup do you
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;}
recommend:
1) 1) WLC to monitor the C800 using its public IP address
1) 2) Create a VPN tunnel from each of the remote sites to our data center and only allow wireless to go through for mgmt purposes
anany other options?
T

First question is which 800 do you have ? there's like 20 different versions out there.
If you talk about WLC, I would suppose you have something like the 880 ?
I'm afraid the WLC will need the internal AP ip address. So you would need to do so reverse nat to direct public ip address tarffic on capwap ports to the internal AP.
This or the VPN tunnel.
Nicolas
===
Don't forget to rate answers that you find useful

Error: "Cannot access the web server" with BlazeDS Turnkey

Help! I'm new to Flex and BlazeDS and Eclipse. I was trying to setup a Flex Project using a BlazeDS/Tomcat server running from Eclipse on Windows XP per the example in flexbandit.com/archives/55#comment-269 and in (www.infoq.com/articles/blazeds-intro).   I am NOT using the Eclipse Flex plug-in. I'm using Flex Builder for the Flex code.
Here's what I've done:
I installed BlazeDS and tested http://localhost:8400 - That worked.
I setup Tomcat in Eclipse. - That seemed to work.
I created a Dynamic Web Project in Eclipse - That seemed to work.
I created the bare-bones BlazeDS Configuration under the Eclipse project and then created a basic HelloWorld java class.
I added the destination in the “remoting-config.xml” file found in the c:/projects/workspace/ReportGenTool/WebContent/WEB-INF/flex” directory:
<destination id="HelloWorld">   <properties> <source>HelloWorld</source> </properties> </destination>
When I started the application server by clicking on the server's green play button in Eclipse and then tried to open localhost:8400/ReportGenTool, I got the 404 error : The requested source (/ReportGenTool/) is not available which according to the instructions is fine.
Next I created a Flex Project, but when I try to validate the new Flex project configuration, it gives me an error "Cannot access the web server. The server may not be running, or the web root folder or root URL may be invalid."
When I validated the server was running after setting up the BlazeDs Turnkey, I saw the BlazeDS page.
Now when I bring up http://localhost:8400 I get:
      Directory Listing for /
      Apache Tomcat/6.0.14
My eclipse project is named ReportGenTool and I've overwritten the WebContent directory with the META-INF and WEB-INF directories from the BlazeDS installation (C:\blazeds\tomcat\webapps\blazeds). According to Eclipse the server is running.
My Flex project is named ReportGenTool and is located in another directory away from the Eclipse project directory.
     My root folder is: C:\Projects\workspace\ReportGenTool\WebContent
     Root URL: is http://localhost:8400/ReportGenTool/
     Context root is: /ReportGenTool/
Any idea what might be wrong? What didn't I configure that needs to be configured?
Thanks in advance.

This is not working because your router has a direct to your web server that is not through the outside interface which is needed for nat to occur, for this to work you need to setup a loopback interface as nat outside and policy route traffic to there for your server traffic
Bu if your server is internal why do you need nat at all? Can you not use bind with views that might be simpler
M
Sent from Cisco Technical Support iPad App

In my home net with EA450 doesn't work Remote Desktop Access

Hello.
Today I've bought new LinkSys EA4500. And now it is a promlem with RDP into my home network (not from outside). My iMac can't to connect to PC by RDP and so also iPad can't. The PC is working properly and at this moment I can see it by web access from iMac at this moment.
Last three years I used a LinkSys WRT340 and it worked without problem in my network. Wherw may be a problem with setups EA4500 and what is solution?
Thanks.

I believe this concern is regarding the new design of the router of not supporting reverse NAT. To know more about this concern, click on the link below.
Protecting Your Router Against Possible DNS Rebinding Attacks

E20120 SP2 CAS memory use

We have E2010 SP2 CAS on VMware. 2 sites (inet facing and non-inet facing), 3 CAS per site, 4 cores, 8GB mem. All of the CAS show mem use at about 7.5GBs very consistently, seemingly regardless of load, as seen from Task Manager. The
heavy users are w3wp processes and RCP client Access as expected. RCA is usually around a 1GB, activesync w3wp hovers around 1GB and OLK Anywhere and OWA w3wp avg .5GB. The other w3wp avg between 100 - 350 MBs. The AB srvc avg 350 MBs.
Our VMware admin reports use no higher than 5.5GBs of physical mem over the past 3 months, but I'm not clear even after talking with him what it's exactly measuring, , private working set, peak working set, etc.
We do have an ActiveSync issue we're working to fix. Because of a reverse NAT at the edge the Async devices look like a single IP, so affinity is kept to a single site 1 CAS, and all proxied connections go to a single site 2 cas cause they're all
coming from the same site 1 CAS. The 2 servers getting hit with the Async devices switches from time to time, and there proc use avg spikes. The other 4 CAS will have very low proc use, but no matter what the mem use stays the
same on all CAS.
Is it expected that Exchange CAS services will use as much mem as is available, similar to the IS, or do these servers have the perfect amount of memory? Is task manager not reporting correctly because it's on VMware?
Any feedback is appreciated.

Hi Matt,
Please try to install SP2 CU2 or SP3 for testing. More details to see:
http://support.microsoft.com/kb/2800133
http://support.microsoft.com/kb/2688667
I also find some workaround in following thread for your reference:
https://social.technet.microsoft.com/Forums/en-us/46b35dc0-1f3c-4286-9eae-35d02ebf44b1/exchange-2013-w3wpexe-processes-consuming-large-amounts-of-memory?forum=exchangesvradmin
Thanks
Mavis Huang
TechNet Community Support

Download Anyconnect client inside ASA

Hi,
I currently have a Cisco 5520 ASA which is up and running and the users are able to connect to Anyconnect to VPN into the network.
However, users plugged into the internal network inside the ASA are unable to connect to the vpn address and download the Anyconnect Client. I think this may be to do with reverse NAT missing?
I would appreciate any help.
Thanks in advance.
Nisha

Hi Lee,
I enabled the Anyconnect Client on the inside interface but have had no luck.
The users are trying to browse to a vpn address from which they are prompted to install the Anyconnect software. This comes under Network (Client) Access right?
Thanks in advance.
Nisha

Cannot access internal web server from same lan

i cant resolve one problem in may 1921 ISR router, i have a web server in my internal lan , i set up static nat for accessing that web server from outside and it works fine but i cannot view that site from internal workstations can you suggest me what to do. i need packets to go out the outgoing interface of router and then come back and enter the static nat wich will direct to the web server is it possible?
static nat is
ip nat inside source static tcp <local web server adress> 80 <global address> 80
also i have set up dinamic nat for outgoing trafic
ip nat inside source list <access-list> interface <outgoing interface>
and it is working fine too.
on external interface i have nat outside
on internal interface i have nat inside

This is not working because your router has a direct to your web server that is not through the outside interface which is needed for nat to occur, for this to work you need to setup a loopback interface as nat outside and policy route traffic to there for your server traffic
Bu if your server is internal why do you need nat at all? Can you not use bind with views that might be simpler
M
Sent from Cisco Technical Support iPad App

Router Recommendation

It seems that the documentation on the linksys website is now a Quick Install Guide and does not cover what options a particular router model supports. So I'm going to have to list what I require here to find out which models support what I need. There should be another way in my opinion. I'm looking for a router with the following requirements: 1) PORT FORWARDING TO SUBNET BROADCAST ADDRESS TO SUPPORT WOWLAN
                - OR -
   ABILITY TO ASSIGN A PERSISTENT MAC ADDRESS
   TO A PARTICULAR LAN IP ADDRESS
   E.G. PORT FORWARD UDP 7 TO 192.168.X.255
        WHICH WILL XLATE TO MAC ADDRESS FF:FF:FF:FF:FF:FF
2) LAN LOOPBACK AKA HAIRPIN NAT
3) MAC RESERVATION - ASSIGN A CONSISTENT LAN IP ADDRESS TO A PARTICULAR MAC
4) QOS BY MAC ADDRESS (FOR VOIP)
5) ENABLING WAN SIDE PING
6) REMOTE ADMIN ON A USER SELECTABLE PORT
7) PPPoE
8) 802.11ACN WITH SIMULTANEOUS DUAL BAND MINIMUM and 4 antennas
9) WIFI MAC ADDRESS FILTERING
10) WIFI GUEST - NICE TO HAVE
11) IP ADDRESS BLOCKING "CHINESE BLOCK"
12) USB 3.0 DISK PORT - PUT "COMMON DATA" ON THIS13) Obviously Port Forwarding - preferably with the ability to change the PORT14) Good ventilation - some router model's WIFI becomes erratic in summer weather due to it seems components becoming unstable due to poor ventilatoin design, necessitating placing a fan under the router I'd prefer one unit, but I would consider a WRT based router and a separate WAP if this is the only choice.

For example, the EA9200 - I've spent 3 hours now trying to find a PROPER user manual that describes the options, in order to determine if the device fits my needs. Not to be found. That doesn't mean it doesn't exist. It means that either CICSO doesn't believe that we should know what the configuration options do, or a manager at CISCO needs to be dismissed because users can't find FULL documentation. Not an oversight - GROSS NEGLIGENCE. The EA9200 - only thing after 3 hrs of searching I've found is a 14 page "plug it in and hope it works" manual. And I don't agree that a phone call replaces written communication. "I didn't say that" or "That's not what I meant". While on the phone, I have to type written doc, doing CISCO's work. In addition, I call CISCO. Leave a message. They call me back AT THEIR CONVENIENCE. I'm busy. I call back - telephone tag. No - I want proper written documentation. This is for a home network -- albeit an advanced one - i.e. a properly set up on. All of the other router manufacturers provide full doc except for CISCO. I challenge the President of CICSO to, without insider help, come onto THEIR WEBSITE and find such a doc. If I were running CISCO, a head would roll for such a gross oversight.  I won't be considering anything CISCO if the CISCO approach is "trust us, it works, but if it doesn't, you can return it but we won't reimburse you for your time and money". CICSO VP - PLEASE RESPOND - CAN YOU FIND FULL PRODUCT DOCUMENTATION?

RV220W - port redirection/access rules with multiple WAN IPs

I've just installed a Cisco RV220W - which works fine for outbound traffic, however for inbound it seems unable to work with multiple WAN IPs.
We have a block of 6 WAN IPs assigned to us by our ISP, and I want to make use of all of them to expose certain ports on our servers to the outside world.
I've tried to do this with Access Rules (using HTTP as an example) with the following settings:
Connection Type: Inbound (WAN (Internet) > LAN (Local Network))
Action: Always Allow
Service: HTTP
Source IP: Single Address
Start: <one of the WAN IPs>
Send to Local Server (DNAT IP): <IP of the internal server>
Use Other WAN (Internet) IP Address: disabled
Rule Status: Enabled
Yet the server/port remains inaccessible.
I've tried:
rebooting the server with a power off/on again
implementing the same settings in port forwarding
triple-checking all IP addresses being used
The only way I've got it working is by changing the access rule so that it applies to any source address rather than one specific one... however that's not a solution for us as we need to use specific IP addresses for specific internal servers/ports.
The router's admin interface certainly suggests this should be possible, however making use of it seems to break all incoming access!
Any suggestions welcome.

You should be using "ANY" as the source IP, as you are publishing your internal server to the internet and internet means the request comes from any source IP (you don't know what it is, so it will be any.
Basically, you want any source IP to hit one of your WAN IPs on port 80, and then your firewall will redirect that request to the internal server's private IP address on same port 80. And when the response comes back from the internal server, the firewall will already have this translate entry in it so the reverse NAT will happen (you don't need configure this, it is default firewall feature).
I hope I have answered your question well.
Please mark as correct if you like the response.
Thanks

EA 6500 server set up problem

I just purchased the EA 6500 router to replace my D-link DIR-665 and I am running into a problem with my web server, VNC remote access software, and Teamspeak 3 server.
I've used the DCHP reservation tool to designate the server's IP address on the network and used the single port forwarding feature to unlock all the same ports that I did on my old router; 80 & 443 (basic server) 9987 (teamspeak 3) and 5900 (for the VNC server).
I am running windows server 2008 rs enterprise on the server. The server can get out onto the internet; however, it cannot see the web page when checking it from the "browse web site" (from the server manager). The website is also not visible from any other pc going to it from the internet. Additionally, the VNC software cannot find the server either through the web address (XXXXXX.com) or by typing in the specific ip address on the network. Teamspeak is having the same issue in that people cannot connect to the server.
I have an account with easy dns and I am using dynsite on the server as I do not have a static IP address from my ISP.
As far as I can tell I've set everything correctly. and everything matches the settings on my old dlink router. For the life of me I cannot figure out what is stopping the web server from reaching the internet properly.
Any help/suggestions are appreciated. I'm at my wits end here and am about to just return the router for a refund.

Ravensnow wrote:
The issue smentioned indeed make this router (now a belkin router as belkin bougth it) totlaly unuseable. I had to throw out 2 of these just because of that silly reverse NAt totally not working. Odd thing is that this does work on most other non belkin/linksys routers.
I am assuming Linksys setup their new routers this way for security reasons. To test if certain functions behind the router are working, you need to do it from outside the network. By the way, I found something from the net about DNS Rebinding Attacks. This might be the reason why Linksys designed their new routers that way. Please click on the following link to know more:
http://blog.trendmicro.com/trendlabs-security-intelligence/protecting-your-router-against-possibl-dn...

WRT610n access external ip from within LAN - NAT loopback

Hi everybody,
I've replaced my old ZyXEL P-320W with a WRT610n and lost one feature...
I basically have a NAS assigned to IP 192.168.1.2, my router has IP 192.168.1.1 locally of course.
Imagine I have IP X.X.X.X from the internet and that this IP is registered to myip.dyndns.org.
In the old days (with my ZyXEL), I could ssh to my NAS using myip.dyndns.org from within my LAN, but now, I HAVE TO use the local ip (192.168.1.2) to access to it...
I've done some research and found out that this feature is named "NAT loopback" and the closest to that feature I've found in the router configuration is "Filter Internet NAT Redirection" (in Security > Firewall) but enabling it or not does not make any difference...
Did you guys already experience this? Is there a solution?
Thanks in advance
Jon

Basically,to access the NAS...you have to use the local ip address...As far as the SSH is concerned,You need to open port 22 on the linksys router.Check this link.
For logins using ssh keys permissions are very important to make it work. By default in WRT root's home directory is "/tmp". Create a directory called "/root" and changed root's home directory to this (edit the /etc/passwd file). Put your DSA and/or RSA keys in "/root/.ssh/authorized_keys" and "chmod -R go= /root" on the WRT. It should work...

"Loopback" or "reverse NAT" on EA2700 / DB N600

Similar Messages

Maybe you are looking for