Solved: Cisco 1841

xenoearth · ‎07-03-2008

Hi guys, I'm having a problem here that I hope the experts here can help me out on.

Currently, I have an Exchange server sitting on my LAN behind a Cisco 1841 (IOS v12.4 1c) which has a public IP address, meaning you would be able to access the SDM via the IP address (Insecure, I know).

Anyway, I would like to re-direct queries to the IP address to my Exchange OWA, but I am not sure how I would accomplish this using the Cisco 1841's SDM.

a.alekseev · ‎07-03-2008

OWA is accessed via httpS:///exchange'

to forward https do

ip nat inside source static tcp 1.1.1.1 443 interface e0 443

OWA is accessed via http:///exchange'

to forward http do

ip nat inside source static tcp 1.1.1.1 80 interface e0 80

View solution in original post

a.alekseev · ‎07-03-2008

int e0

desc ### outside ###

ip nat outside

int e1

desc ### inside ###

ip nat inside

ip nat inside source static tcp x.x.x.x 443 interface e0 443

whrere x.x.x.x is ip address of your Exchange server

xenoearth · ‎07-03-2008

Hi Alekseev,

I understand the part about NAT, but OWA is accessed via 'http:///exchange', so how would forwarding the SSL port to the server IP address get around this?

I understand that there are ways for me to allow users to access OWA by directly accessing the server IP address, but assuming if I do not go by that route, are there no other alternatives?

Thanks!

a.alekseev · ‎07-03-2008

OWA is accessed via httpS:///exchange'

to forward https do

ip nat inside source static tcp 1.1.1.1 443 interface e0 443

OWA is accessed via http:///exchange'

to forward http do

ip nat inside source static tcp 1.1.1.1 80 interface e0 80

xenoearth · ‎07-03-2008

Hi Alekseev,

Ah! It's beginning to dawn upon me now. So what you're saying is, since OWA is listening on the SSL port, we would just re-direct all OWA SSL queries to the SSL port for the internal IP address of the server itself?

BTW, that was a typo in my previous post; I mean to put https://... thanks for correcting me!

a.alekseev · ‎07-03-2008

Correct...

Since OWA is listening on the SSL port, we would just re-direct all OWA SSL queries to the SSL port for the internal IP address of the server itself