Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

[ISA570] How to join a mail server on a LAN from a different VLAN

Hi

I have an INVITE WIFI network, that  join Internet by an ISA570 interface port. This INVITE Wifi has it own  independant VLAN, without a DNS server.

It is just for Internet, no gateway with the LAN network.

So My exchange  server is on my LAN, and my "Invite" Wifi's User tried to join my  exchange server by it fdqn (mail.xxx.fr), which is the public IP of the  WAN interface on the same ISA570.

But they don't succeed in it, and I don't how to do. There is a mistake.

Is there a specific configuration for this case ?

Thanks for your help.

Kevin

4 REPLIES

Re: [ISA570] How to join a mail server on a LAN from a different

Try using NAT Hairpinning on pages 14 and 15 of this document.

http://www.cisco.com/en/US/docs/security/small_business_security/isa500/technical_reference/nat/isa500_NAT_appnote.pdf#page14


Sent from Cisco Technical Support iPhone App

Shawn Eftink CCNA/CCDA Please rate all helpful posts and mark correct answers to assist others searching for solutions in the community.
New Member

Re: [ISA570] How to join a mail server on a LAN from a different

Thanks.

But this is my case :

My LAN is on 172.20.0.0/20 : ISA570 and Exchange server are on this LAN

There is a static NAT between IP_PUBLIC1 and my exchange server (172.20.1.xx) in the ISA configuration.

My INVITE Network is on 192.168.40.0/24

So when I'm on INVITE Network, I'm trying to match my mail server by mail.xxx.fr that is pointing on IP_PUBLIC1.

How to make the advance NAT to be OK with this ?

New Member

Re: [ISA570] How to join a mail server on a LAN from a different

This is the NAT i have created, but it doesn't work :

Re: [ISA570] How to join a mail server on a LAN from a different

Kevin,

Would you please attach 2 more screenshots?

  1. Static NAT configuration
  2. ACL Rules From VLAN40_Invit To Any

Shawn Eftink
CCNA/CCDA

Please rate all helpful posts and mark correct answers to assist others searching for solutions in the community.

Shawn Eftink CCNA/CCDA Please rate all helpful posts and mark correct answers to assist others searching for solutions in the community.
456
Views
0
Helpful
4
Replies