cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
308
Views
0
Helpful
3
Replies

Possible to access own external IP's?

jksnook
Level 1
Level 1

When using a PIX 506 is there a way to allow the internal network to access the external IP range associated with the outside interface?

For example:

Web Server: 206.29.137.58

PIX e0: 206.29.137.57

PIX e1: 10.0.0.1

PC: 10.0.0.10

Is there a way to allow the PC to access the Web server using the external IP?

3 Replies 3

astripat
Level 1
Level 1

Hi,

Yes we can do that and the process used is referred to as "DNS Doctoring".

Here is how we can do it:

Create a static translation for the web server like this:

static(inside,outside) 206.29.137.58 dns

Here dns is a keyword.

Also, on the outside interface we should have an access-list which should allow access to this ip:

access-list 101 permit ip any host 206.29.137.58

access-group 101 in interface outside

I hope it helps.

Thanks

Ashu

Thank you for the reply.

Does this mean that I would only be able to use DNS names to access the resources assigned to the external IP's? Or will I be able to use the direct IP address instead of a name?

Thanks,

Jason

Not sure you would want to allow ip from any to your webserver as previously stated but try this document it may help you...

http://cisco.com/en/US/products/ps6120/products_configuration_example09186a00807968d1.shtml

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card