Không telnet được router từ internet

[dhc_fox]

Chào các anh,

Em đang có con router 3845 chạy internet qua đường FTTH : LAN(192.168.0.0/24) --> F2/0 C3845 -->G0/0 --> Internet
Hiện tượng:
- Từ LAN kết nối ra internet bình thường.
- Từ LAN telnet, ssh được tới router ( 192.168.0.1/24)
Nhưng từ internet không thể telnet, ssh được vào router qua IP WAN. Router quay PPPoE qua Dialer1 và được cấp IP WAN từ ISP. Telnet báo lỗi ko open được port 23.

Nhờ các anh chỉ giúp xem lỗi gì. Có phải liên quan đến Access-list không à?
Trên router có cài đặt VPN( nhưng phần này chắc không liên quan).

Xin cảm ơn,

Cấu hình như sau:
Router1#sh run
Building configuration...

Current configuration : 2845 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Router1
!
boot-start-marker
boot-end-marker
!
enable password 7 091A1B5D4A5746
!
no aaa new-model
!
!
dot11 syslog
ip cef
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.0.11
ip dhcp excluded-address 192.168.0.12
!
ip dhcp pool USER
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 8.8.8.8
!
!
ip domain name hcsv.com.vn
ip name-server 8.8.8.8
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
multilink bundle-name authenticated
!
voice-card 0
no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
vtp mode transparent
username admin privilege 15 password 7 12485744465E5A
!
!
crypto isakmp policy 1
encr 3des
hash md5
authentication pre-share
group 2
crypto isakmp key FX7S29sdfsdfefsdfe address 180.43.112.70
!
crypto ipsec security-association lifetime seconds 7200
!
crypto ipsec transform-set HCSV esp-3des esp-md5-hmac
!
crypto map HCSV 1 ipsec-isakmp
set peer 180.43.112.70
set transform-set HCSV
match address 100
!
archive
log config
hidekeys
!
vlan internal allocation policy ascending
!
ip ssh version 2
!
!
!
!
interface GigabitEthernet0/0
no ip address
duplex auto
speed auto
media-type rj45
pppoe enable group global
pppoe-client dial-pool-number 1
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
media-type rj45
!
interface FastEthernet2/0
no switchport
ip address 192.168.0.1 255.255.255.0
ip nat inside
no ip virtual-reassembly
!
interface FastEthernet2/1
!
interface FastEthernet2/2
!
interface FastEthernet2/3
!
interface FastEthernet2/4
!
interface FastEthernet2/5
!
interface FastEthernet2/6
!
interface FastEthernet2/7
!
interface FastEthernet2/8
!
interface FastEthernet2/9
!
interface FastEthernet2/10
!
interface FastEthernet2/11
!
interface FastEthernet2/12
!
interface FastEthernet2/13
!
interface FastEthernet2/14
!
interface FastEthernet2/15
!
interface Vlan1
no ip address
!
interface Dialer1
ip address negotiated
ip mtu 1258
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
ppp authentication pap callin
ppp pap sent-username abcde password 7 03025F58535A721A
ppp ipcp route default
crypto map HCSV
!
ip forward-protocol nd
!
!
no ip http server
no ip http secure-server
ip nat inside source list 1 interface Dialer1 overload
!
access-list 1 permit any
access-list 100 permit ip 192.168.0.0 0.0.0.255 192.168.160.0 0.0.0.255
access-list 101 permit tcp any any
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
login
line aux 0
line vty 0 4
password 7 324dgsdgfsd
login local
transport input ssh
line vty 5 14
login
line vty 15
password 7 sdf324325
login local
!
scheduler allocate 20000 1000
!
end

Router1#

[Tai tuong]

Thanks vì bài viết hữu ích! ^^

[Yaariyan]

This is exceptionally decent and good post....You shook posting it.....Thanks a ton for posting it.....!!!

[Nguyen Van Hon]

transport input telnet nhé bạn