321 Studios OL-7141-04 NAT

2-7

Cisco SDM Express

OL-7141-04

Chapter2 Cisco SDM Express Edit Mode

NAT

Unable to configure Firewall Window

If SDM Express is unable to let you configure a firewall, the Unable to configure

Firewall window is displayed. The following are reasons why you may not be able

to configure a firewall:

•The router is a fixed-port router and there is not exactly one LAN and one

WAN interface configured.

•The router is a modular router, or there are more than two interfaces

configured.

•A firewall and/or access control lists have been applied to your router using

other tools.

Refresh Button

This button is visible if you editing an initial configuration. Click

Cisco SDM Express Buttons for more information.

NAT

If devices on the LAN have private addresses, you can allow them to share a

single public IP address by using Network Address Translation (NAT). NAT uses

port numbers to identify hosts, and the host services that you want to make

available.

Click Enable NAT to use NAT on the router.

Unable to Configure NAT

If you are in SDM Express edit-mode, this window appears when SDM Express

is not able to help you configure NAT. SDM Express may not be able to help you

configure NAT for the following reasons.

•The router is a fixed-port router and there is not exactly one LAN and one

WAN interface configured.

•The router is a modular router, or there are more than two interfaces

configured.

•NAT is already configured on an interface.

Contents

Main Cisco SDM Express Users Guide Page CONTENTS Page Page Page CHAPTER Cisco SDM Express Welcome Basic Configuration Hostname Field Username and Password Fields Enable Secret Password Field Router Provisioning SDM Express USB Token or USB Flash Secure Device Provisioning CNS Server Provision From USB Token Provision From USB Flash File Selection Name Size Time Modified Wireless Interface Configuration LAN Interface Configuration Interface/Bridge-to-Interface List IP Address Field Subnet Mask Field Subnet Bits Field Wireless Parameters Fields DHCP Server Configuration Enable DHCP server on the LAN interface Check Box Starting IP Address Field Ending IP Address Field Import all DHCP option parameters to the DHCP server database Check Box Primary Domain Name Server Field Secondary Domain Name Server Field Use these DNS values for DHCP clients Check Box Internet (WAN): Ethernet Interface Enable PPPoE Check Box Authentication Type Check Box Username Field Confirm Password Field Internet (WAN): Autodetect Encapsulation Status Icon and Enable or Disable Button Internet (WAN): User Specified Encapsulation Status Icon and Enable or Disable Button Encapsulation List Virtual Path Identifier Field Virtual Circuit Identifier Field IP Address for Remote Connection in Central Office Field Authentication Type Check Box Username Field Confirm Password Field WAN Interface Selection Add Connection, Edit, Delete Buttons Enable or Disable Button Interface List Serial Connection Encapsulation List IP Address and Subnet Mask Fields Frame Relay Configuration Settings Link Frame Relay Configuration Settings DLCI Field LMI Type Field Use IETF Frame Relay Encapsulation Check Box Internet (WAN): Advanced Options Create Default Route Check Box CNS Server Information Enter the CNS Server IP Address /Hostname Field Enter the CNS ID String Field Firewall Configuration Security Settings Disable SNMP Services on Your Router Check Box Disable Services that Involve Security Risks Check Box Enable Services for Enhanced Security on the Router/Network Check Box Enhance Security on Router Access Check Box Encrypt Passwords Check Box Summary Supplementary Help Cisco Router and Security Device Manager Cisco Network Services Security Settings Disable SNMP Disable Finger Service Disable PAD Service Disable TCP Small Servers Service Disable UDP Small Servers Service Disable IP BOOTP Server Service Disable IP Identification Service Disable CDP Disable IP Source Route Enable Password Encryption Service Enable Netflow Switching Enable TCP Keepalives for Inbound Telnet Sessions Enable TCP Keepalives for Outbound Telnet Sessions Enable Sequence Numbers and Time Stamps on Debugs Enable IP CEF Set Scheduler Interval Set Scheduler Allocate Set TCP Synwait Time Enable Logging Enable Unicast RPF on Outside Interfaces Disable IP Gratuitous ARPs Disable IP Redirects Disable IP Proxy ARP Disable IP Directed Broadcast Disable MOP Service Disable IP Unreachables Disable IP Mask Reply Set Minimum Password Length to Less Than 6 Characters Set Authentication Failure Rate to Less Than 3 Retries Set Banner Enable Telnet Settings Enable SSH for Access to the Router Cisco SDM Express Buttons Help Button About Button Exit Button Apply Changes Button Reconnecting to the Router After Initial Configuration Testing Your WAN (Internet) Connection SDP Troubleshooting Tips Troubleshooting Tips CHAPTER Cisco SDM Express Edit Mode Overview Icons LAN Fields Internet (WAN) Fields Firewall Fields Basic Configuration Edit/Delete Buttons Username/Login Password/Password is Encrypted Fields Enable Secret Password Field Hostname Field LAN Bridge/Do not bridge LAN interface with wireless Checkbox LAN interface configuration Fields Wireless WANUnable to Configure WAN Interface No WAN Available Delete Connection Firewall Enable Firewall/Disable Firewall Buttons Unable to configure Firewall Window NAT Unable to Configure NAT Add or Edit Address Translation Rule Original Port Translated Port Protocol Routing Enable Check Box Forwarding (Next Hop) Field Security Settings Select All (Recommended by Cisco) Checkbox Disable Services that Involve Security Risks Checkbox Enable Services for Enhanced Security on the Router/Network Checkbox Encrypt Passwords Checkbox Synchronize with my local PC clock Checkbox Tools Ping Option Telnet Option Cisco SDM Option Software Update Option Update SDM from Cisco.com CCO Login Update SDM from Local PC Update SDM from CD Date and Time Properties Synchronize with my local PC clock Checkbox Synchronize Checkbox Edit Date and Time Fields Apply Button Reset to Factory Defaults Step 1: Save Running Config to PC Step 2: Write down these steps and then reset the router Reconfiguring Your PC with a Static or a Dynamic IP Address Page Feature Not Available Page INDEX B C D L M N P