Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Access server from remote site via routers and firewall

Hi!

As per the diagram, each remote site will need to access the server situated in the main site.

I have configured the routers and firewall.

Please check if this configuration will work.

See attached the configurations and diagram.

Regards,

Alvin

1 ACCEPTED SOLUTION

Accepted Solutions
Bronze

Re: Access server from remote site via routers and firewall

Hi Alvin,


Did it resolve the issue.

If so, please mark the issue as resolved so that we can give way to newer discussions.


Cheers,

Avinash.

6 REPLIES
Bronze

Re: Access server from remote site via routers and firewall

Hi Alvin,

global (outside) 3 10.0.0.30 netmask 255.255.255.255
nat (inside) 3 ServerIP 255.255.255.255

What is this for ?

Also, at the remote site you should be adding a route for the Server IP address specifying the Main Router's IP address as the next hop.

Cheers,


Avinash.

New Member

Re: Access server from remote site via routers and firewall

Dear Avinash,

In the remote site router I have already added the network route:

ip route 172.30.4.1 255.255.255.255 192.168.1.1

where 192.168.1.1 is the WAN IP address of the main router.

The ip nat inside source static 10.0.0.31 172.30.4.1 is supposed to NAT the 10.0.0.31 IP to 172.30.4.1 IP.

Are the global (outside) 3 10.0.0.30 netmask 255.255.255.255 and nat (inside) 3 ServerIP 255.255.255.255 not necessary to permit the server to connect to the remote sites.

Regards,

Alvin

Bronze

Re: Access server from remote site via routers and firewall

Hi Alvin,

You already have a static translation configured for the server.

So, the nat global statements are not required.

Also, please be informed that dynamic pat (nat & global) is unidirectional.


Cheers,

Avinash.

New Member

Re: Access server from remote site via routers and firewall

Ok Avinash.

But I still need the ip nat inside source static 10.0.0.31 172.30.4.1 command to further translate the server IP from 10.0.0.31 to 172.30.4.1 and then configure the remote router with the ip route 172.30.4.1 255.255.255.255 192.168.1.1.

Regards,

Alvin

Bronze

Re: Access server from remote site via routers and firewall

Yeah...sure

Bronze

Re: Access server from remote site via routers and firewall

Hi Alvin,


Did it resolve the issue.

If so, please mark the issue as resolved so that we can give way to newer discussions.


Cheers,

Avinash.

383
Views
0
Helpful
6
Replies