Regarding /32 Connected Route

[Amandeep Singh Marwah]

Hi Everyone,

In the new IOS versions when we configure an IP address on an interface, a corresponding /32 route gets installed in the routing table which is denoted by 'L'.

Router#sh ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       + - replicated route, % - next hop override

Gateway of last resort is not set

C        192.168.1.0/24 is directly connected, FastEthernet0/0
L        192.168.1.3/32 is directly connected, FastEthernet0/0

I want to remove this 'L' route. Is this possible?

[Harold Ritter]

Hi Amandeep,

No, it is not possible. Why would you want to do that?

Regards

[Amandeep Singh Marwah]

Hi Harold,

Thanks for replying.

I want to add a static route for that IP and want it to be preferred over connected route.

[Harold Ritter]

Hi Amandeep,

Thanks for the additional information. Why would you want to have a static route ro a host address that locally exist? Could you please tell us more about the context?

Regards

[Amandeep Singh Marwah]

Thanks for taking intereset Harold.

Here is what I want to do.

I have a server which is in the local network and the router is connected to the internet as well. I have a static NAT setup on port 80 for my server with the public IP configured on the interface connected on the internet so that the server can be accessed from the internet.

This is working fine. I want to be able to access the server with the public IP from my local network as well. So, I want the router to redirect the traffic back to the server.

I know that it is possible on the firewall but how can we do this on the router?

[Harold Ritter]

Hi Amandeep,

In general, you should use a split DNS to access this server with the internal address. A split DNS is configured with two zones for the same domain. One for internal users and one for external users. The internal users would get the internal address when querying the DNS for the server name. External users would get the external address. The internal zone could also contain information that would not be available to external users.

Regards

[Amandeep Singh Marwah]

Thanks for the response Harold but if I could do this then there would be no worries and I would be relaxed .

I have to do something on the router to get this working.

[cadet alain]

Hi,

So you want to access server from inside on its external  IP (not using names)?

In Which case NAT NVI should let you do what you want:

you replace nat statements under interfaces by "ip nat enable" and you replace your nat statement by omitting the "inside" keyword also under WAN interface configure "no ip redirect"

Regards

Alain

Don't forget to rate helpful posts.