Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

routing from internal local ip to internal global ip


this is my second question for the day!

i'm having a cisco 805, with LAN on 192.168 private ip range.

for the ethernet interface, i've bound 2 ips (one private, and one public) because we have one machine within the network that has a public ip, and it needs to communicate with the internet. so as its gateway on the router, it uses the public ip bound to the router's ethernet interface.

there is a web server inside the network with private ip ( NAT on the router maps a public ip to so that outside users can access this web server (say

my problem is this: users who are on the LAN cannot type and access this web server. i tried the following on the router but it did not work.

ip route <global ip> <subnet mask> ethernet 0

however, when a traceroute is done on from a machine on the LAN, it completes successfully on 1 hop!

any ideas as to how i can get the router to route packets from inside to another machine on the inside using its NATed ip?

many thanks


Cisco Employee

Re: routing from internal local ip to internal global ip

since an interface can only be inside or outside, the only way you could fix

this problem is by having another ehternet interface and configure it as nat outside.

However, I'm curious to know why you need to setup your server with a public ip address.

You could use a private ip address and use a static nat translation on the router so the server is reachable from the outside.

New Member

Re: routing from internal local ip to internal global ip


the web server *is* having a private ip, and there is a natting which maps a global ip to this private ip. therefore the server is reachable from outside.

my problem is, internal users cannot type on the browser the full domain name (which gets translated to the global ip by our dns) and access the site.

hope i'm being clear!