321 Studios OL-7141-04 manual Unable to configure Firewall Window, Unable to Configure NAT

Page 59

Chapter 2 Cisco SDM Express Edit Mode

NAT

Unable to configure Firewall Window

If SDM Express is unable to let you configure a firewall, the Unable to configure Firewall window is displayed. The following are reasons why you may not be able to configure a firewall:

The router is a fixed-port router and there is not exactly one LAN and one WAN interface configured.

The router is a modular router, or there are more than two interfaces configured.

A firewall and/or access control lists have been applied to your router using other tools.

Refresh Button

This button is visible if you editing an initial configuration. Click

Cisco SDM Express Buttons for more information.

NAT

If devices on the LAN have private addresses, you can allow them to share a single public IP address by using Network Address Translation (NAT). NAT uses port numbers to identify hosts, and the host services that you want to make available.

Click Enable NAT to use NAT on the router.

Unable to Configure NAT

If you are in SDM Express edit-mode, this window appears when SDM Express is not able to help you configure NAT. SDM Express may not be able to help you configure NAT for the following reasons.

The router is a fixed-port router and there is not exactly one LAN and one WAN interface configured.

The router is a modular router, or there are more than two interfaces configured.

NAT is already configured on an interface.

 

 

Cisco SDM Express

 

 

 

 

 

 

OL-7141-04

 

 

2-7

 

 

 

Image 59
Contents Cisco SDM Express User’s Guide Cisco SDM Express User’s Guide N T E N T S Contents Cisco SDM Express Edit Mode Contents A P T E R WelcomeDomain Name Field Basic ConfigurationUsername and Password Fields Hostname FieldSDM Express Enable Secret Password FieldRouter Provisioning CNS Server Provision From USB TokenUSB Token or USB Flash Secure Device ProvisioningProvision From USB Flash File Selection Size Wireless Interface ConfigurationLAN Interface Configuration NameSubnet Mask Field Wireless Parameters FieldsInterface/Bridge-to-Interface List IP Address FieldStarting IP Address Field Dhcp Server ConfigurationEnable Dhcp server on the LAN interface Check Box Refresh, Apply Changes, Discard Changes ButtonsSecondary Domain Name Server Field Ending IP Address FieldPrimary Domain Name Server Field Address Type List Enable PPPoE Check BoxInternet WAN Ethernet Interface Use these DNS values for Dhcp clients Check BoxUsername Field Authentication Type Check BoxPassword Field Confirm Password FieldInternet WAN User Specified Encapsulation Status Icon and Enable or Disable ButtonInternet WAN Autodetect Encapsulation Virtual Circuit Identifier Field Encapsulation ListVirtual Path Identifier Field IP Address for Remote Connection in Central Office Field Add Connection, Edit, Delete Buttons Enable or Disable ButtonWAN Interface Selection Refresh Button Serial ConnectionInterface List IP Address and Subnet Mask Fields Frame Relay Configuration Settings LinkUse Ietf Frame Relay Encapsulation Check Box Frame Relay Configuration SettingsDlci Field LMI Type FieldCNS Server Information Internet WAN Advanced OptionsSecondary DNS Field Firewall ConfigurationPrimary DNS Field Security Settings Disable Services that Involve Security Risks Check Box Disable Snmp Services on Your Router Check BoxSummary Enhance Security on Router Access Check BoxEncrypt Passwords Check Box Cisco Router and Security Device Manager Cisco Network ServicesSupplementary Help Disable Snmp Security SettingsDisable PAD Service Disable Finger ServiceDisable TCP Small Servers Service Disable IP Bootp Server Service Disable UDP Small Servers ServiceDisable CDP Disable IP Identification ServiceEnable Password Encryption Service Disable IP Source RouteEnable TCP Keepalives for Inbound Telnet Sessions Enable Netflow SwitchingEnable IP CEF Enable TCP Keepalives for Outbound Telnet SessionsEnable Sequence Numbers and Time Stamps on Debugs Set Scheduler Allocate Set Scheduler IntervalSet TCP Synwait Time Enable Unicast RPF on Outside Interfaces Enable LoggingDisable IP Redirects Disable IP Gratuitous ARPsDisable IP Directed Broadcast Disable IP Proxy ARPDisable IP Unreachables Disable MOP ServiceSet Minimum Password Length to Less Than 6 Characters Disable IP Mask ReplySet Banner Set Authentication Failure Rate to Less Than 3 RetriesEnable SSH for Access to the Router Enable Telnet SettingsAbout Button Cisco SDM Express ButtonsHelp Button Discard Changes Button Reconnecting to the Router After Initial ConfigurationExit Button Apply Changes ButtonTesting Your WAN Internet Connection Troubleshooting Tips SDP Troubleshooting TipsLAN Fields OverviewIcons Firewall Fields Internet WAN FieldsEdit/Delete Buttons Username/Login Password/Password is Encrypted FieldsRefresh/Apply Changes/Discard Changes Buttons Encrypt password using MD5 hash algorithm CheckboxBridge/Do not bridge LAN interface with wireless Checkbox Edit a UsernameNo WAN Available WirelessWAN-Unable to Configure WAN Interface LAN interface configuration FieldsFirewall Enable Firewall/Disable Firewall ButtonsDelete Connection Unable to Configure NAT Unable to configure Firewall WindowAdd or Edit Address Translation Rule Routing Select All Recommended by Cisco Checkbox Disable Services that Involve Security Risks CheckboxSynchronize with my local PC clock Checkbox Encrypt Passwords CheckboxPing ToolsDestination Field Update SDM from Cisco.comTo clear the output of the ping command Source FieldCCO Login Update SDM from Local PCUpdate SDM from CD Edit Date and Time Fields Date and Time PropertiesSynchronize Checkbox Apply Button Reset to Factory DefaultsSave Running Config to PC Write down these steps and then reset the routerReconfiguring Your PC with a Static or a Dynamic IP Address Microsoft Windows NT Feature Not Available Cisco SDM Express Edit Mode Feature Not Available D E IN-2