Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ASA 5505 turn around on outside interface for web sites

Problem - installing a 5505 to replace a Microsoft Routing&Remote access setup with websites. The box has two interfaces an internet (public) and an (internal) 10.90.x.x IP net.

Wante to know if there is a way to allow external IPs to be used for the websites(which will be statically mapped to 10.90.x.x addresses.

The current DNS setup resolves the web sites to the outside IPs for the NAT'd users on the inside and the PIX will not allow this traffic back in the outside interface.

Trying not to create th website zones on the internal DNS.

4 REPLIES
Gold

Re: ASA 5505 turn around on outside interface for web sites

Green

Re: ASA 5505 turn around on outside interface for web sites

DNS Doctoring as srue has pointed out, or another option is hairpinning.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807968d1.shtml#solution2

New Member

Re: ASA 5505 turn around on outside interface for web sites

I had tried the same-security-traffic statement but did not include the important static mapping (inside,inside) for the two IP's

thanks I now have options.

New Member

Re: ASA 5505 turn around on outside interface for web sites

This looks exactly what I need.

Thanks

111
Views
5
Helpful
4
Replies