How to translate this

Answered Question
Mar 27th, 2007
User Badges:

I have a webserver that is on my inside network. I created a NAT that translates a public Ip to inside Ip and it works great.


The only problme I have is that I cannot access from inside the Public IP of the internal webserver. How do I setup this reverse translation?

Correct Answer by acomiskey about 10 years 1 month ago

There are 2 good options here


http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807968d1.shtml#


If you are using an external dns server, the first option will work well, dns doctoring. The second option is hairpinning, which will allow the traffic to enter and exit the inside interface with a static nat.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
acomiskey Tue, 03/27/2007 - 08:02
User Badges:
  • Green, 3000 points or more

There are a few solutions for this but depends on what code you're running, is this pix or asa?


You can edit the HOST file on your machine to point to inside address. You can do dns doctoring if using an external dns server. You can do hairpinning if you are running code 7.

Correct Answer
acomiskey Tue, 03/27/2007 - 10:08
User Badges:
  • Green, 3000 points or more

There are 2 good options here


http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807968d1.shtml#


If you are using an external dns server, the first option will work well, dns doctoring. The second option is hairpinning, which will allow the traffic to enter and exit the inside interface with a static nat.

abinjola Tue, 03/27/2007 - 10:50
User Badges:
  • Cisco Employee,

ok use these commands :-


same-security-traffic permit intra interface


static (inside,inside)


cl xlate

cl loc

norriscr1 Tue, 03/27/2007 - 11:52
User Badges:

!!! Just be careful running the "cl xlate" command in a production environment. That could really impact your current traffic and cause the phones to ring.

abinjola Tue, 03/27/2007 - 12:30
User Badges:
  • Cisco Employee,

were the commands helpful..?

Actions

This Discussion