ASA 5505 turn around on outside interface for web sites

tleizear · ‎09-11-2007

Problem - installing a 5505 to replace a Microsoft Routing&Remote access setup with websites. The box has two interfaces an internet (public) and an (internal) 10.90.x.x IP net.

Wante to know if there is a way to allow external IPs to be used for the websites(which will be statically mapped to 10.90.x.x addresses.

The current DNS setup resolves the web sites to the outside IPs for the NAT'd users on the inside and the PIX will not allow this traffic back in the outside interface.

Trying not to create th website zones on the internal DNS.

srue · ‎09-11-2007

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/cfgnat.html#wp1042753

acomiskey · ‎09-11-2007

DNS Doctoring as srue has pointed out, or another option is hairpinning.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807968d1.shtml#solution2

tleizear · ‎09-11-2007

I had tried the same-security-traffic statement but did not include the important static mapping (inside,inside) for the two IP's

thanks I now have options.

tleizear · ‎09-11-2007

This looks exactly what I need.

Thanks