Need NAT Loopback for RV 120W

I recently replaced a client's router with a Cisco RV 120W. The client employs a web-based application on an internal server that manages their business. Workers in the field use a handheld device power by WIndows Mobile to access a mobile version of the the web-based app. Data contained on the mobile app syncronizes with the server when workers choose a sync menu. Some workers perform this sync in the field, others wait till they return to the office and use the wireless provided by the router. Prior to changing the router, the synching worked fine either inside or outside the company network. The mobile app accesses the internal server via the router's public IP address. The router forwards the http requests to the internal server. But now the synching does not work internally. I assume it's because the Cisco RV 120 W does not support NAT Loopback, or I simply haven't figured out how to enable it. Does anyone know how to enable NAT Loopback on the RV 120 W so I can access the web-based app by through the router's external IP while on the private side of the LAN??

Hi,
There were an open bug for this issue on 1.0.1.3 but was fixed with 1.0.2.6, so i would make sure you're running latest firmware; after this has been verified or installed. If you're having trouble with hairpinning on latest firmware then please give SBSC a call @ 1-866-606-1866 and open a support case.
Jasbrayn

Similar Messages

Need help for NAT, ACL for VoIP

Dear experts
I configure my PBX server to work with one VoIP provider. When I put the server in blank network, mean that without VLANs.
The IP PBX server can register to the VoIP provider system normally and I can make call out and receive calls normally.
However, when I put the PBX behind the Cisco router with some configuration. The PBX cannot register with the VoIP provider system.
Eventhough I can receive calls from outside but can not make a call from inside to outside, because of the PBX cannot register.
Could you please help me to point out what is wrong with my Cisco router configuration.
Thanks a lot
Building configuration...
Current configuration : 1982 bytes
! Last configuration change at 17:18:27 UTC Mon Feb 24 2014
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname Router
boot-start-marker
boot-end-marker
enable secret 5 $1$ZJEF$8np0QvQTD1nTaOosa9yGW1
no aaa new-model
memory-size iomem 20
no ipv6 cef
ip source-route
ip cef
multilink bundle-name authenticated
crypto pki token default removal timeout 0
license udi pid CISCO2911/K9 sn FTX1603AH9C
interface Embedded-Service-Engine0/0
no ip address
interface GigabitEthernet0/0
description internal-LAN
ip address x.x.x.4 255.255.0.0
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
interface GigabitEthernet0/1.1
encapsulation dot1Q 11
ip address 172.x.x.1 255.255.240.0
interface GigabitEthernet0/2
description internet
ip address 50.x.x.93 255.255.x.x
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
ip forward-protocol nd
no ip http server
no ip http secure-server
ip nat inside source list 100 interface GigabitEthernet0/2 overload
ip nat inside source static udp x.x.x.8 5060 50.x.x.93 5060 extendable
ip route profile
ip route 0.0.0.0 0.0.0.0 50.x.x.94
ip route 172.16.240.0 255.255.x.0 x.x.x.5
ip route 172.16.242.0 255.255.x.0 x.x.x.5
access-list 100 permit ip x.x.0.0 0.0.255.255 any
access-list 100 permit ip 172.16.240.0 0.0.0.255 any
access-list 100 permit ip 172.16.242.0 0.0.0.255 any
access-list 100 permit udp any any range 5004 5090
access-list 100 permit udp any any range 10000 20000
control-plane
line con 0

Hello.
Do you have the same static NAT mapping for TCP 5060?

WRT610n access external ip from within LAN - NAT loopback

Hi everybody,
I've replaced my old ZyXEL P-320W with a WRT610n and lost one feature...
I basically have a NAS assigned to IP 192.168.1.2, my router has IP 192.168.1.1 locally of course.
Imagine I have IP X.X.X.X from the internet and that this IP is registered to myip.dyndns.org.
In the old days (with my ZyXEL), I could ssh to my NAS using myip.dyndns.org from within my LAN, but now, I HAVE TO use the local ip (192.168.1.2) to access to it...
I've done some research and found out that this feature is named "NAT loopback" and the closest to that feature I've found in the router configuration is "Filter Internet NAT Redirection" (in Security > Firewall) but enabling it or not does not make any difference...
Did you guys already experience this? Is there a solution?
Thanks in advance
Jon

Basically,to access the NAS...you have to use the local ip address...As far as the SSH is concerned,You need to open port 22 on the linksys router.Check this link.
For logins using ssh keys permissions are very important to make it work. By default in WRT root's home directory is "/tmp". Create a directory called "/root" and changed root's home directory to this (edit the /etc/passwd file). Put your DSA and/or RSA keys in "/root/.ssh/authorized_keys" and "chmod -R go= /root" on the WRT. It should work...

DNS loopback for Netgear DEVG2020 router

Recently our router replaced with Netgear Devg2020 and we are having problem of DNS loopback not working issue. We have a Webserver with domain, au.accedo.tv, in internal network ie. 192.168.0.100 that cannot be access from LAN. We had no problem of this when we use Cisco router. Is there a way to set DNS loopback enable that local network users can access to web server with domain name? We need that because of vhosts need to be connected from local devices.

We have the same problem - firmware version VER_06.02.5 I would like to know if anyone at Telstra is reading this (or even cares) as this has been an issue for more than 6 months now, or if anything can be done, I have tried support, they can't help, they put me on to the Premium support (paid). Why should I have to pay to have an issue fixed that was not there before this new router was installed? We have security cameras, remote desktop, ftp servers, all which we could access via the WAN IP address from within the LAN (NAT Loopback/Reflection) using our old Netgear DGN1000 ADSL router. We now have the DEVG2020 Netgear router supplied as part of the Digital Office Technology system from Telstra, since this upgrade, NAT loopback no longer works, nor does FTP from one LAN client to another (to solve this issue I moved FTP to port 2121). All cameras, remote desktops, ftp servers can be accessed from a network outside the office (via the WAN address), but to access from inside the office, we have to change to the 192.168.0.X addresses to access the servers. At home, I have Optus cable, and their Netgear router interface looks almost identical to the Telstra Netgear DEVG2020, except that on the Optus modem, NAT loopback works perfectly, as does internal FTP connections across the LAN. Please provide a fix for this firmware which will: 1. Allow NAT loopback to be enabled/disabled (or simply make it work!)2. Allow FTP (standard port 21) to work properly from a LAN client to another LAN client. (yes I did try to tick the FTP box in Security -> ALG) Trent.

NAT loopback

Hi
I have Cisco 880 (Version 15.0(1)M6) router and have problems with accessing internal server using external IP (as far as I found it is called “NAT loopback or reverse NAT”). It works well on cheap Linksys RV082 but can’t get it works on mine device. I have only one external IP address.
I read somewhere that it is not possible.
Could you confirm this or there is a way to get it run?

Hi.
What you are looking to do is perform REVERSE PORT ADDRESS TRANSLATION.
People call it all sorts of crazy things like: NAT Hairpinning, NAT-on-a-stick, NAT reflecting, and NAT loopback.
Just to clear this up,.. Hairpinning is a technique used in a NAT-on-a-stick configuration that involves having the NAT "loopback" the traffic. This sounds like what you want, but is very likely NOT what you want. These configuration in their simple form have only one interface. They practically turn a router into a NAT server to a switched network.
It is difficult to get to these kind of questions using Google, so I will rephrase:
If you cannot reach an internal server using the GLOBAL IP address and port, then this post is FOR YOU!
You have to configure another type of NAT called NVI instead of traditional NAT.
To configure NAT NVI you substitute:
ip nat outside or ip nat inside for ip nat enable in interface configuration mode.
ip nat inside source static a.b.c.d xx int fa0 yy for ip nat source static a.b.c.d xx int fa0 yy in global configuration mode.
ip nat source route-map NAT_MAP interface Dialer1 overload for ip nat inside source route-map NAT_MAP interface Dialer1 overload in global configuration mode.
Now, you should be able to access your web server from the LAN using the GLOBAL IP ADDRESS.
This is GREAT, right ?! Not so if you have a dynamic IP address, because as soon the router reboots, it will start up, and the NAT entries will be classical NAT entries instead of NVI entries. This breaks "port forwarding" in general, so I wrote a script to re-enter the statements as soon as the interface is placed in up status. I'm just going to leave this here, and if anybody needs help feel free to ask.
(BTW, you can tell this is happening to you if you have ip nat source static ... statements visible in the output of show ip nat translations instead of ip nat nvi translations.)
The script is available here:
https://github.com/vittorio88/cisco-scripts/blob/master/fix_nvi.tcl
Save it, and copy to the router. Look inside the file for how configure IOS to use the script.
Good Luck!
P.S. Enabling NVI makes your router take a slight performance hit. This may be more notable on older routers or 800 series.

WRT160N NAT loopback

So I am running a home web server. I just got my Cable connection and had to get a router. Staples told me this was the best for what I needed it for. From another conection my websites come up fine but from within the network I cant access them via the domain name, for example is I post a picture to a forum with nmy domain name http://www.11111111.com/images/2222.JPG or somthing it wil;l come up not found. If however I type in http://server/images/2222.JPG they come up fine but then the rest of the world can not see them. The poeple that programed the server said I have to configure NAT Loopback through my router to be able to access the site via the domain within the network but for the life of me I cant find any settings for it or anything. Any advice?

A have the same problem i think. I Have a internet connection to my netgear router.The router sends all request to destination 10.0.0.1 (subnet 255.255.255.0),which is my home web server.My Public IP is 195.47.47.50.The problem is,that for example in Wordpress,or other applications,you have to specifi the IP adress,or domain,they are using.
So if i set the default adress in Wordpress to http://195.47.47.50/wordpress i cant acess this page from within my internal network,but only from the internet.Of course,when i set it to 10.0.0.1 i can acess it from my internal network,but not from the internet.The thing i want is to acess the web server both from internet and from my internal network from adress 195.47.47.50.
I have been trying to find a solution for that,but i think,that i will need a loopback or a proxy server.I tryed to configure it with my ISP,but they are either silly or lazy for that. (they have their router too at my home,but i cant acess it ... )
If someone could help,i will be very pleased.

Need a hint for home office / 871 does not support port-security - FPM ?

Hi,
i want to realize the following setup:
- Central Site 871 with Internet Connection and static IP
- Home office 871 with Internet Connection and static IP. On that home office router, there should be 2 Vlans: 1 for the office work and one for the user's private PC. All Traffic from the "office" Vlan is being put into a VPN to the central site. All Traffic on the other interface is being natted and goes straight to the internet.
To minimize security issues, i tried to configure port-security, so that the user cannot connect with his private PC to the office LAN ports and vice versa. Unfortunately, port-security seems not to be supported on the 871 (advanced ip services image).
Now i looked for an alternative...and came over to FPM (flexible packet matching).
If i understood right, you can classify packets for example by their source MAC address and if this field matches a specific value (the mac of the work pc), packets can be dropped by a policy.
Of course i cannot avoid that the user connects the work pc together with his private pc (this is then related to the OS Security to keep out viruses, worms, trojans, etc). But i could/want to restrict the internet access with the work pc through "normal" Internet access - the users should not be able to do that (must use the company's proxy).
I did the follwing config:
class-map type access-control match-any c2
match start l2-start offset 48 size 6 regex "0xabcd1234fedc"
match field ETHER source-mac regex "abcd1234fedc"
policy-map type access-control p2
class c2
drop
interface Vlan1
ip address 192.168.20.1 255.255.255.0
ip nat inside
ip virtual-reassembly
service-policy type access-control input p2
service-policy type access-control output p2
As this feature is quite new, i'm not familiar with it's syntax.
I also tried to use "string" instead of regexp, but i'm still able to connect the office pc to the private Lan and i am able to access the "Internet" (currently it's only setup in a lab).
As i understood so far, the offset is the value in bits, and size is in bytes. is that correct?
Has anyone yet some experience with FPM or maybe any hint for me how to realize the requested setup with the 871 routers?
bets regards,
Andy

For the FPM feature to work you will need PHDF files for the protocols you want to scan for to be loaded on your routers. The files can be downloaded from cisco's website. In your case you will have to download ether.phdf file.

NAT Support for Finesse

Hi,
I have a customer who wants VPN less access to Finesse server for agents from remote locations and for home agents.. we are thinking of using NAT here.
Summary of the Architecture: 2 DCs (UCCE Side A and Side B), centralized call termination, VGs in DCs, VXML gateways also in DCs. 9 agent locations connected via MPLS links to DCs, 1 outsourced agent location with 100 agents ( planning to go for mobile agents for outsourced agents)
It is mentioned in the below link that Finesse supports basic NAT between Finesse server and Finesse clients
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cust_contact/contact_center/finesse/finesse_1051/release/notes/CFIN_BK_R34A18D2_00_release-notes-for-cisco-finesse-1051/CFIN_BK_R34A18D2_00_release-notes-for-cisco-finesse_chapter_00.html#CFIN_RF_N6A0AC5F_00
I don't have much understanding of security concepts.. so looking for some help here.
1. Does NAT (one to mapping) between Finesse server and Finesse client means, each of the Finesse clients will also need one unique public ip mapped to each of the agent PCs?
2. What are the benefits and drawbacks of using Nating approach instead of using VPN access to Finesse servers?
3. Since it is mentioned that one to many mapping between Finesse servers and Finesse clinets is not supported, need to understand with an example of one to many scenario in contact enter world.
Thanks
Nirmal

Hi, we have a similar setup for one of my clients and NAT works for us, for both inshouse and outsource sites which connects to us via the Public.
1. Does NAT (one to mapping) between Finesse server and Finesse client means, each of the Finesse clients will also need one unique public ip mapped to each of the agent PCs?
Ans. Why Public IPs? How is that one outsourced company connecting into the DCs network?
2. What are the benefits and drawbacks of using Nating approach instead of using VPN access to Finesse servers?
Ans. We tested both, and I think VPN works better as when they VPN they are technicaly a part of the network and then can access Finesse locally,
3. Since it is mentioned that one to many mapping between Finesse servers and Finesse clinets is not supported, need to understand with an example of one to many scenario in contact enter world.
Ans. One to many is when for eg 10 PCs behinds NAT but they talk to Finesse server as only 1 IP and teh NAT table manages the sessions to these 10 Finesse client PCs. One to One is when every PC gets a NATed IP to talk to outside workd / Finesse.
Kartik

Does WRT54GL supports NAT loopback ?

After reading from some forums, got to know that WRT54G has support for NAT loopback.
Anybody tried that feature ? how do we configure it in the router ?
Thanks,
Gaurav

Hi,
Thanks for your reply.
Have you tested and confirmed the behaviour? Could you let me know which firmware version this feature is not supported?
in the below forums, I can see this router do support NAT loopback.
http://www.linksysinfo.org/index.php?threads/router-with-nat-loopback-aka-reflection.24934/
http://www.tomsguide.com/us/linksys-wrt54g-wireless,review-470-4.html
Thanks,
Gaurav

Does airport extreme support nat loopback?

...Like having my own server on my lan and access it the same way from inside my lan as from outside...
On my old Xyxel I have to enable this by typing "ip nat loopback on" in it's terminal window...
Anyone that know how this works with an airport extreme base station?

or is it written in some specification for the AirPort device?
NAT Loopback is not ever mentioned in any Apple specifications or installation manuals that I can locate.
In addition, there are no settings for NAT Loopback in AirPort Utility, the application that must be used to configure the AriPorts.
If Apple makes no mention of this setting, and the setting does not even exist in the configuration software, it is a good bet that NAT Loopback is not supported on the Apple product.

I NEED ADOBE SERVICE FOR A REFUND -- TONIGHT

I'm ready to scream -- I was supposed to be transferred to the department for a refund and instead it timed out and ended my chat:
The chat line is: (EMPHASIS ON THE RED FONT AREAS -- I NEED TO CANCEL DREAMWEAVER CS6 (AS I WAS ASSURED I WOULD HAVE NO PROBLEM DOING) AND GET A REFUND -- I JUST PURCHASED DREAMWEAVER CC.
One moment please while we route your chat to a representative.
All representatives are currently assisting others. Thanks for your patience. A representative will be with you shortly.
Thank you for contacting Adobe Sales. My name is Gavin. How may I help you today?
Gavin: Hi, may I have your first name please?
you: Hi, my name is Barry. I spoke with your chat line the other night, the night I purchased CS6. I was on the fence, do I want CS6 (for about $400) or CC (with the ongoing $20 a month fee). I was told that if I wanted to cancel CS6 and move to CC, it would be OK, since I had only installed CS6 and had not used it yet. And that I could get the refund for CS6 and install CC at the same time. At the moment, my purchase from Best Buys had not registered in your system, but I'm sure it has now. SO THE QUESTION AGAIN -- could you discuss with me the pros and cons of CS6 vs. CC -- I have heard that I will not be able to update/upgrade CS6, that it is close-ended, and that CC will be a constant addition of latest features. PLEASE ELUCIDATE ME ON WHICH PROGRAM I (A NEOPHYTE WHO JUST PAID SOMEONE TO BUILD ME A WEBSITE) MIGHT WANT TO USE.
Gavin: Hello Barry
Gavin: Let me explain that for you.
you: Hi, -- can you read my lengthy question and provide me your insights, CS6 or CS CC? Thanks, Gavin - I might have spoken with you the other night even.
Gavin: No, its with other representative.
Gavin: Adobe Creative Cloud is our newest option for you, That will give you everything , plus the ability to sync and store your files
Gavin: If you purchase the software outright at once then you'll be paying the upgrade cost when new version releases but that is not the case when subscribed to Creative Cloud membership since you get free upgrades to future version and will remain current with the latest software tools.
you: Is there some comparison sheet which would lay out the features and benefits of the two programs, side by side, for an educated decision? I was told that CS6 if purchased outright is NOT UPGRADABLE -- wouldn't that lean me toward DW CC instead, to stay current as features are added and tools too? IF THAT IS THE CASE, PLEASE REFUND ME THE CS6 COST AND SIGN ME UP FOR THE DW CC PROGRAM INSTEAD. I was told you could transfer me to the folks in your place who could make this happen -- but I NEED IT DONE TONIGHT! My website developer is coming tomorrow and needs an installed program to train me on.
Gavin: We are connected, right?
you: sorry, it took time to frame my question
Gavin: That's okay.
Gavin: Barry, I see that going forward all new versions will be through creative cloud membership.
Gavin: I'll help you with the cancellation for your CS6 purchase made once you complete the sign up for Dreamweaver CC, Okay
you: SO, HELP ME TO A DECISION, GAVIN. What do I do? Get the monthly fee program and turn in the CS6 for a refund? HELP
you: Lead the way -- BUT.... AND IT'S A BIG "BUT" -- will it be installed and functioning TONIGHT so my guy can train me tomorrow? PLEASE ANSWER THEN let's get this new sign up & cancellation into action.
Gavin: I see that there is no option to equalize the CS6 purchase for the CC subscription plan however you need to subscribe first and then will refund the CS6 purchase made.
Gavin: After subscribing to Dreamweaver CC you can download/ install the software immediately
Gavin: Sounds great, right?
you: So you cannot help me -- what do I do? How do I subscribe first, and how do I get the refund for CS6? Please advise. I'm ready to do it NOW!
Gavin: I'll help you now with the link to subscribe Dreamweaver CC and then help you to get the refund for CS6, Okay
you: fantastic -- I'm at your disposal
you: what do you need from me?
Gavin: Please click here to subscribe
Gavin: I'll stand by please let me know once your done.
you: one last question -- as I said, I'm new to this -- can I later upgrade to Creative Cloud's whole family by just increasing my monthly payment by the difference? please advise.
Gavin: Yes, that's possible.
Gavin: You can later switch or upgrade to complete creative cloud membership when you require other products.
you: great - I'm purchasing now and will let you know when it goes through
Gavin: Sure
you: do I have to un-install CS6 first? PLEASE ADVISE - I'M STARTING TO DOWNLOAD AND DIDN'T THINK OF IT!!!!
Gavin: Excellent!
Gavin: You can uninstall CS6 version once you complete the download for CC.
Gavin: Barry, please stay online while I transfer this chat to our Customer Service Team for more help on cancellation for your CS6 purchase made, Okay
you: I am online, and DW CC has extracted and is half-way through the next step
you: by the way, here's my proof of purchase--should I proceed through the entire installation and checking for upgrades. Need I check for upgrades, or is this the latest version?
you: We received your payment - thank you! Here are the details about that order for your records: Order Details: Creative Cloud single-app membership for Dreamweaver (one-year) $19.99 per month Order # AD010920985
Gavin: Excellent!
Gavin: Please run the download to install, mean while you cancel the order for CS6 purchase made, Okay.
you: Ok - how do I cancel it? Will you turn me over to that department to effect the cancellation?
Gavin: Yes, please stay online while I transfer this chat.
you: Dreamweaver CC is now installed. Thanks for your help, Gavin. I'm so nervous about this because I can't afford to screw it up and have my website guy come tomorrow and not be able to train me.
Gavin: Not to worry!
Please wait while I transfer you to an operator at Adobe Service.
We are still assisting other customers, thank you for your patience. You can also try our community forums, where experts are online 24/7.
We are still assisting other customers, thank you for your patience. You can also try our community forums, where experts are online 24/7.
You are not currently connected to a chat representative.
Your chat transcript will be sent to [email protected] at the end of your chat.
We are still assisting other customers, thank you for your patience. You can also try our community forums, where experts are online 24/7.
You are not currently connected to a chat representative.
We are still assisting other customers, thank you for your patience. You can also try our community forums, where experts are online 24/7.
You are not currently connected to a chat representative.

Hello Barry,
as one of these DW fans here, I'm very surprised and disappointed how your chat passed off. And I can fully understand your immeasurable disappointment. So I/we won't give up this quickly. Maybe you would succeed by using the written form. The employees have time to reflect your problem in an optional way. Please try it once more and use this form for "Sales Inquiries" (Contact us online):
http://www.adobe.com/products/request-consultation/marketing-cloud.html?promoid=KAWSG
Good luck!
Hans-Günter

Do We need access key for Additional Data B in VA01

Hi all,I have to add fields in Additional Data B,I have searched SDN about it and came to know that it is screen '8459' of program 'SAPMV45A',but it is asking key for that,is it safe applying access key for this screen?
Thanks in advance.

>is it safe applying access key for this screen?
yes it is safe. SAP provided the screen 8459 only for adding our own custom fields to it. For this you need access key for the first time. along with that you need access key for
PBO include, PAI include
MV45AOZZ ,MV45AIZZ .
check it once.

Need standrad program for vendor aging report

Hi
Need standrad program for vendor aging report.
Please reply me only standrad programs.
Point are sure.
Regards,
kumar

Hi Pankaj
sorry to say that this is not my required program.
I need vendor aging report like s_alr_87012178 tc leads to customer aging report.
Thanks for your effort.
points are awarded.
Regards,
kumar

Keynote and pages are now free, but why do i need to pay for them still when there now free?!?

keynote and pages are now free, but why do i need to pay for them still when there now free?!?

Users can obtain the iWorks and iLife applications free, if they purchased a Mac after the beginning of October 2013.
Older Mac purchases require a paid purchase of these applications.

HT201209 How to get an itunes gift card code, no need to wait for shipping

Good day to all,
I want to get an itunes gift card just to download whatsapp on my iphone 3gs. I have my credit card but the billing address is in Haiti, unfortunately Haiti is not in your list of countries. How can I get itunes gift card code immediately in order to download that application? No need to wait for shipping, just want to have the code to add it to my apple account.
If you have a better solution, it's welcome.
Thank you in advance for your reply

Sorry, but you can't, if you live in Haiti. As you say yourself, there is no iTunes Store for Haiti and you are not allowed to use the iTunes Store of any other country.
If you live in a country where there is an iTunes Store, check to see if Apple sells physical gift cards in your country and if so purchase and redeem one of those. There is no way to purchase an electronic gift certificate from Apple without a credit card from the country whose iTunes Store you wish to use.
Regards.

Need NAT Loopback for RV 120W

Similar Messages

Maybe you are looking for