Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Allow inside host to access inside server through its outside IP?

Hi everyone, I need some 9.1 NAT help!

 

Got a subnet,.. 192.168.10.0/24 .. on this subnet both clients and servers are located.

 

I'm currently NAT'ing (server) 192.168.10.10 to our outside interface IP and allowing ports 80 from the Internet.

Now, our inside clients needs to access the server through our external DNS that points at the ASA outside interface..

 

How do I do this NAT config?

 

Like this 

192.168.10.0/24 -> External IP ->  Inside server IP

 

Is this correct?

 

Object network Internal_To_Server_192.168.10.10

host 192.168.10.10

nat (Outside,Inside) static <external ASA outside IP> 80 80

 

is that correct?

 

Thanks 

Everyone's tags (1)
7 REPLIES

Try this:object network

Try this:

object network INSIDE-SERVER

host 192.168.10.10

!

object network INSIDE-SERVER

nat (inside,outside) static <outside-ip>

New Member

That will get my server the

That will get my server the external Ip address of the ASA

 

I need my inside hosts to be able to connect to the that outside IP and get it pointing inwards at 192.168.10.10

 

old NAT

static (outside,inside) <external ip> 192.168.10.10 service www .. i think.. been awhile since I did ASA config. 

I don't know what you are

I don't know what you are looking for. Is it a NAT from an external IP to an internal address or the opposite way? Can you tell me which address you wonna NAT to which address & from which interface to which interface. Maybe you have even a drawing....

 

cheers

Walter

New Member

When local clients 192.168.10

When local clients 192.168.10.0/24 tries to go to (http) 213.10.10.10 that they should be directed to 192.168.10.10 instead.

 

"213.10.10.10" is the outside IP address of the ASA just a fyi

In this case try this object

In this case try this

 

object network OUTSIDE-SERVER

host 213.10.10.10

 

!

object network OUTSIDE-SERVER

nat (outside,inside) static 192.168.10.10

New Member

Thanks, I'll give this a go

Thanks, I'll give this a go and get back to you if it works!

 

 

New Member

I did not get this to work,

I did not get this to work, Cisco TAC did a static NAT instead

 

nat (Inside,Inside) 1 source static obj-Internal_Networks obj-Internal_Networks destination static obj-213.10.10.10 obj-192.168.10.10 service desthttp desthttp

 

I need to start learning 8.3 updates :D

 

Thanks for the help!

 

632
Views
5
Helpful
7
Replies
CreatePlease to create content