I am trying to configure a cisco 3640 to allow users within our network to access the global ip of machines within the same network. Currently the router works okay for all incoming external traffic seeking the webserver and serves up those sites fine.
Users on the inside of the network can access the domain via the web server okay (for example
www.xyz.com) and it displays the proper page in their bowser. They can also bring up the page by typing in the internal ip address of the webserver. However when I try to bring up the page by typing in the global ip of the webserver from within the network - no page is displayed.
I can ping the global IP internally, but that's about it! no telnet, http, ftp access is permitted.
See my router config below (For this question I've used a local ip of the webserver as 172.9.1.102 and its global ip as 202.25.224.19) . Can anyone help me out?
ROUTER config
Using 2282 out of 129016 bytes
!
version 12.2
no service single-slot-reload-enable
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname TESTBOX
!
logging buffered 4096 debugging
logging rate-limit console 10 except errors
enable secret xxxx
enable password xxxxx
!
ip subnet-zero
!
no ip finger
no ip domain-lookup
ip name-server 172.9.1.1
!
no ip dhcp-client network-discovery
mls rp ip route-map
partition flash 2 8 8
!
interface FastEthernet0/0
ip address 172.9.1.1 255.255.255.0
ip directed-broadcast
ip accounting output-packets
ip nat inside
no ip mroute-cache
speed auto
full-duplex
no cdp enable
!
interface FastEthernet0/1
ip address 202.25.224.194 255.255.255.248
ip directed-broadcast
ip accounting output-packets
ip nat outside
speed auto
full-duplex
no cdp enable
!
router eigrp 100
network 172.9.0.0
auto-summary
no eigrp log-neighbor-changes
!
ip nat inside source list 1 interface FastEthernet0/1 overload
ip nat inside source static 202.25.224.19 172.9.1.102 extendable
ip nat inside source static 172.9.1.102 202.25.224.19
ip classless
ip route 0.0.0.0 0.0.0.0 202.25.224.193
ip http server
!
access-list 1 permit 172.9.1.0 0.0.0.255
no cdp run
snmp-server community public RO
!
line con 0
transport input none
line aux 0
line vty 0 4
password xxxx
login
!
end
Start Free Trial