cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
295
Views
0
Helpful
2
Replies

NAT on PIX

lubosbella
Level 1
Level 1

Hi,

we have a problem to setup our pix.

Pix is set as folows:

Users in inside network (connected to inside interface) have addresses for example 192.168.30.x,192.168.31.x

Public address on pix (outside interface) are for example 193.112.1.100, 193.112.1.99....

Now when someone want to access from outside interface (193.112.1.100 - people from internet) to inside address (192.168.30.10 - server) we have a statement: static (inside outside) 193.112.1.100 192.168.30.10 netmask 255.255.255.255 0 0 which translate this traffic. That is ok.

But now we want that people from inside network 192.168.31.x that access public adress 193.112.1.100 (so their destination address is 193.112.1.100) will be returned to address 192.168.30.10.

So what is statment or how to set up this on pix?

pix have only 2 interfaces - inside (priority 100) and outside (priority 0)

Thank you.

Lubos

2 Replies 2

JORGE RODRIGUEZ
Level 10
Level 10

Lobos, if I understand correctly, your inside users are trying to connect to 192.168.30.10 which is an inside server by using its Nated Public address from outside , if this is true you are looking at DNS doctoring or hairpinning.

Hairpining

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807968d1.shtml#intro

Public NAT address 192.112.1.100

Inside Local address 192.168.30.10

same-security-traffic permit intra-interface

static (inside,inside) 192.112.1.100 192.168.30.10 netmask 255.255.255.255

global (inside) 1 interface

nat (inside) 1 0 0

Jorge Rodriguez

try with "alias" on inside interface

cris.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: