PDA

View Full Version : Cisco 837 Router


vivid
01-12-2003, 09:26
Well I am at my wits end.

So if there is any cisco experts that can help me it be greatly appreciated.

(Substituting my internet server ip name to 203.1.1.1)

I am forwarding the 8767 port by using the following way

"ip nat inside source static 10.7.1.2 203.1.1.1 extendable"

the firewall is completely open for test reasons, it forwards ports even roger wilco which runs on UDP 3786 or something like that works.

But when it comes to TS it doesn't want to know it and the client throws up a
01-12-03 19:02:55,1456,ERROR,ProcedureInfo,Client Open,Exception: Timeout on recv LoginStep2 wait

Any help would be greatly appreicated

Korigon
01-12-2003, 11:12
Your line is correct and if there is no ACL, i dont see why ts doesn't connect.

try command

term mon
debug ip packet

and see what's wrong.

for stop debug command, type : undeb all

Dummer Sack
01-12-2003, 12:09
Also check from you LAN that the TS server is working correctly by connecting to the LAN IP.

vivid
01-12-2003, 22:15
Yup internally lan work perfect no issues at all.

As soon as it goes through the router that where the problem happens.

Haven't tried your advise Korigon but I will today.

vivid
01-12-2003, 23:13
Out the multiple of lines, its hard to debug while 18 people are using the router as well <smile>

these are some lines that I picked out that show no errors appearing

The setup here is you have 1 WAN IP which is the router IP and I have 8 other IP's that gets routed to my WAN IP (from my ISP) this then get fowarded to which ever server I choose. As you can see the first post.

# to overwrite my router sorry, haven't enabled the firewall while I am testing.

(s= Is my ADSL Router address in, 203.194.27.58 seems to be a router from my isp provider not sure how that links in)

18:05:19: IP: s=203.#.#.# (Ethernet0), d=203.194.27.58 (Dialer0), g=203.194.27.58, len 56, forward

(Not sure on ip s= I know it matches g= above. 10.7.1.2 is my TS Server)

18:05:19: IP: s=203.194.27.58 (Dialer0), d=10.7.1.2 (Ethernet0), g=10.7.1.2, len 278, forward

(s= ADSL Router WAN address out d= my external computer addy)

18:05:29: IP: s=203.#.#.# (local), d=203.42.90.91 (Dialer0), len 56, sending

The in and out addresses on my router are different would this be a potential problem that the ip coming in is 203.A.B.208 and the address going back is 203.A.C.27 (note B and C numbers are different).

It strikes me as funny roger wilco works with this setup and Team Speak does not, and teamspeak is a far superior product.

Confused I know I am being to be hehheheh.



I guess my next step to try is to foward all packets from my WAN IP to that server, which I did with UDP 8767 but unfortunately the same error.

Any help be appreciated although I think I scared a lot of people off.
<smile>

PS the webadmin side of thing 14534 works perfectly so this is only a TS issue

Dummer Sack
02-12-2003, 09:47
Hmm, since the Webandim is working, make sure that you forwarded the UDP protocol on port 8767.

The web interface uses TCP protocol and the only reason I can see that one works and the other not is that you mixed up the protocols.

vivid
02-12-2003, 23:03
My apologies, yes it does work the way i said I stuffed up on my access-lists, I only had my tcp open totally not my udp as I found out later, but I did have the udp port open in another entry but its wrong due to the client machine ports aint coming in at 8767 but could be various others. I understood all the requirements but trying to apply them in cisco ios is another thing.

I had it set to "access-list 101 permit udp any eq 8767 any eq 8767"

But thanks to your help I learnt a hell of a lot more about cisco ios.

at the moment I got access list set to

access-list 101 udp any any

I believe it should be set to

"access-list 101 permit udp any host (router ip) eq 8767"

Going out everything is not blocked so no issue there, can anyone confirm that line, for incoming.

Dummer Sack
03-12-2003, 00:03
As far as I know the 800 series has a crippled IOS.

Wait till you see the full one. It is much more UGH.