Hey Guys, I have a 2514 doing NAT with overload on my internet connection getting public dhcp address from my provider on eth 0 . I have a win 2k server getting a private address from eth 1 like 192.168.0.1 and have an ftp site set up with IIS that I want people to be able to access from the internet. What type of access list would allow (if it is possible) people to access my ftp site on the server with a private address like 192.168.0.6 ? Also in the future want to put a web server on a private address also so the same scenario would apply to that. Right now to do the NAT with overload I have
ip nat inside source list 1 interface Ethernet0 overload access-list 1 permit 192.168.0.0 0.0.0.255 And also a more granular extended list that specifies a whole bunch of filters . The main ones being access-list 199 permit ip any 192.168.0.0 0.0.0.255 access-list 199 permit ip any any All suggestions welcome and appreciated. Thanks, Randy Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=35032&t=35032 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

