I have configured NAT using a Cisco router. The following commands are used:
ip nat outside
ip nat inside
ip nat inside source static x.x.x.x y.y.y.y
1. The outside hosts can communicate with the inside hosts by specifying the inside global addresses as destination, no problem.
2. The inside hosts can access the outside hosts (outside local == outside global); the outside hosts see the connection to be from the inside global addresses, no problem.
3. The inside hosts cannot access themselves (the same server or another server in the segment) by specifying the outside global addresses as destination.
Is there a way to allow 3 above?