Can't access static NATed host from local

syaegashi · ‎05-25-2008

Dear,

I tried to make simple configuration for SOHO with Cisco 1841.

Problem is that I Can't access static NATed host from local segement(192.168.1.n)

with x.y.z.3(global address). Target host is located in the same segment(192.168.1.n).

However, I can access x.y.z.3 from outside.

Also ping x.y.z.3 from local works but it was answered from cisco.

Since accessing with global address is requirement, it can't change to access with local address.

Please somebody tell me how to do this.

Summary: sourceIP:192.168.1.2 DestIP:x.y.z.3(taranslated to 192.168.1.11)

ip cef

interface FastEthernet0/0

ip address x.y.z.2 255.255.255.248

ip nat outside

!

interface FastEthernet0/1

ip address 192.168.1.1 255.255.255.0

ip directed-broadcast

ip nat inside

!

ip route 0.0.0.0 0.0.0.0 x.y.z.1

!

ip nat inside source list 1 interface FastEthernet0/0 overload

ip nat inside source static 192.168.1.11 x.y.z.3

access-list 1 permit 192.168.1.0 0.0.0.255

ohassairi · ‎05-26-2008

i think it is meaningless to access a public IP from internal network!

classiclly you can access the public IP from outside not from inside!

why you don't access your server from inside using the private IP?

syaegashi · ‎05-26-2008

Well.. Actually this requirement comes from customer. It seems they access their Intra service with immediate global ip address by clicking from my favorite list of their laptop pc. They take the PC to home and business trip. And they don't want to have any domain name..

I thought this setting is not so special but I could not find any article on the internet.

ohassairi · ‎05-26-2008

i am afraid you are trying to do some thing impossible.

just tell him to add in his favorite a new link (with private IP) to use when he is in office.

Pravin Phadte · ‎05-27-2008

Add the command extendable to this statemnet and check if it works.

ip nat inside source static 192.168.1.11 x.y.z.3 extendable