Using Alias to translate external IP address to Internal but only on Inside interface.

Hi

I have a Pix 515 which is translating external IP addresses into internal IPs using the Static command. This works when users outside the network enter an external IP as it is translatied into one of the internal IPs on the network. But what does not appear to happen is that if a user within the network enters an external IP it is not translating this to the internal Ip address. At present the main NAT is setup as follows:

static (inside,outside) 99.99.99.99 192.168.0.x netmask 255.255.255.255 0 0

I have tried using Alias as follows:

alias (inside) 192.168.0.x 99.99.99.99 255.255.255.255

but this does not seem to work

Any suggestions would be appreciated.
jonhaltonAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Keith AlabasterEnterprise ArchitectCommented:
jonhaltonAuthor Commented:
Hi

Yes, I have seen this and this is why I tried

alias (inside) 192.168.0.x 99.99.99.99 255.255.255.255

I have tested by running a tracert of the external address from within the network and it just times out. If I run the tracert using the internal address it finds in 1 hop. From this I am concluding that the translation is not converting external address to the internal one when inside the network. None of the machines on the network use the external address so it should be going through the firewall to find it. Would you say this is the case or am I missing something?
Keith AlabasterEnterprise ArchitectCommented:
Remember that the translation works by the DNS translation. Not sure if it does it directly by IP address though hence the name DNS Doctoring.
I assume you are making the call by the FQDN name?

If you do an nslookup from a client on the fqdn, what does it return?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
jonhaltonAuthor Commented:
Sorry, yes, I forgot about that, after trying using the domain name, it is translating correctly.

Thank you for your assistance.
Keith AlabasterEnterprise ArchitectCommented:
Your welcome.

regards
keith
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Software Firewalls

From novice to tech pro — start learning today.