Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Allow inside host to access inside server through its outside IP?

Hi everyone, I need some 9.1 NAT help!


Got a subnet,.. .. on this subnet both clients and servers are located.


I'm currently NAT'ing (server) to our outside interface IP and allowing ports 80 from the Internet.

Now, our inside clients needs to access the server through our external DNS that points at the ASA outside interface..


How do I do this NAT config?


Like this -> External IP ->  Inside server IP


Is this correct?


Object network Internal_To_Server_192.168.10.10


nat (Outside,Inside) static <external ASA outside IP> 80 80


is that correct?



Everyone's tags (1)

Try this:object network

Try this:

object network INSIDE-SERVER



object network INSIDE-SERVER

nat (inside,outside) static <outside-ip>

New Member

That will get my server the

That will get my server the external Ip address of the ASA


I need my inside hosts to be able to connect to the that outside IP and get it pointing inwards at


old NAT

static (outside,inside) <external ip> service www .. i think.. been awhile since I did ASA config. 

I don't know what you are

I don't know what you are looking for. Is it a NAT from an external IP to an internal address or the opposite way? Can you tell me which address you wonna NAT to which address & from which interface to which interface. Maybe you have even a drawing....




New Member

When local clients 192.168.10

When local clients tries to go to (http) that they should be directed to instead.


"" is the outside IP address of the ASA just a fyi

In this case try this object

In this case try this


object network OUTSIDE-SERVER




object network OUTSIDE-SERVER

nat (outside,inside) static

New Member

Thanks, I'll give this a go

Thanks, I'll give this a go and get back to you if it works!



New Member

I did not get this to work,

I did not get this to work, Cisco TAC did a static NAT instead


nat (Inside,Inside) 1 source static obj-Internal_Networks obj-Internal_Networks destination static obj- obj- service desthttp desthttp


I need to start learning 8.3 updates :D


Thanks for the help!


CreatePlease to create content