Allow inside host to access inside server through its outside IP?

[anders.lindback]

Hi everyone, I need some 9.1 NAT help!

Got a subnet,.. 192.168.10.0/24 .. on this subnet both clients and servers are located.

I'm currently NAT'ing (server) 192.168.10.10 to our outside interface IP and allowing ports 80 from the Internet.

Now, our inside clients needs to access the server through our external DNS that points at the ASA outside interface..

How do I do this NAT config?

Like this 

192.168.10.0/24 -> External IP ->  Inside server IP

Is this correct?

Object network Internal_To_Server_192.168.10.10

host 192.168.10.10

nat (Outside,Inside) static <external ASA outside IP> 80 80

is that correct?

Thanks 

[WALTER GROSSENBACHER]

Try this:

object network INSIDE-SERVER

host 192.168.10.10

!

object network INSIDE-SERVER

nat (inside,outside) static <outside-ip>

[anders.lindback]

That will get my server the external Ip address of the ASA

I need my inside hosts to be able to connect to the that outside IP and get it pointing inwards at 192.168.10.10

old NAT

static (outside,inside) <external ip> 192.168.10.10 service www .. i think.. been awhile since I did ASA config. 

[WALTER GROSSENBACHER]

I don't know what you are looking for. Is it a NAT from an external IP to an internal address or the opposite way? Can you tell me which address you wonna NAT to which address & from which interface to which interface. Maybe you have even a drawing....

cheers

Walter

[anders.lindback]

When local clients 192.168.10.0/24 tries to go to (http) 213.10.10.10 that they should be directed to 192.168.10.10 instead.

"213.10.10.10" is the outside IP address of the ASA just a fyi

[WALTER GROSSENBACHER]

In this case try this

object network OUTSIDE-SERVER

host 213.10.10.10

!

object network OUTSIDE-SERVER

nat (outside,inside) static 192.168.10.10

[anders.lindback]

Thanks, I'll give this a go and get back to you if it works!

[anders.lindback]

I did not get this to work, Cisco TAC did a static NAT instead

nat (Inside,Inside) 1 source static obj-Internal_Networks obj-Internal_Networks destination static obj-213.10.10.10 obj-192.168.10.10 service desthttp desthttp

I need to start learning 8.3 updates :D

Thanks for the help!