Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

How to translate this

I have a webserver that is on my inside network. I created a NAT that translates a public Ip to inside Ip and it works great.

The only problme I have is that I cannot access from inside the Public IP of the internal webserver. How do I setup this reverse translation?

1 ACCEPTED SOLUTION

Accepted Solutions
Green

Re: How to translate this

There are 2 good options here

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807968d1.shtml#

If you are using an external dns server, the first option will work well, dns doctoring. The second option is hairpinning, which will allow the traffic to enter and exit the inside interface with a static nat.

8 REPLIES
Green

Re: How to translate this

There are a few solutions for this but depends on what code you're running, is this pix or asa?

You can edit the HOST file on your machine to point to inside address. You can do dns doctoring if using an external dns server. You can do hairpinning if you are running code 7.

New Member

Re: How to translate this

Asa version 7.2

New Member

Re: How to translate this

Asa version 7.2

Green

Re: How to translate this

There are 2 good options here

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807968d1.shtml#

If you are using an external dns server, the first option will work well, dns doctoring. The second option is hairpinning, which will allow the traffic to enter and exit the inside interface with a static nat.

Cisco Employee

Re: How to translate this

ok use these commands :-

same-security-traffic permit intra interface

static (inside,inside)

cl xlate

cl loc

New Member

Re: How to translate this

!!! Just be careful running the "cl xlate" command in a production environment. That could really impact your current traffic and cause the phones to ring.

Cisco Employee

Re: How to translate this

were the commands helpful..?

Green

Re: How to translate this

glad I could help!

170
Views
0
Helpful
8
Replies