Solved

NAT Inside to Inside

Posted on 2009-06-28
2
782 Views
Last Modified: 2012-05-07
I have an internal network, with an internal mail server.

When I do an DNS lookup for my mail server, it goes to

203.xxx.xxx.xx which is a public address.

The router is set up to do a port forward back to the internal 192.168.2.2 address if it's an external address.

However, the traffic doesn't seem to reach the mail server when the client is internal.

How do I setup the CISCO 877 router to

1. Do NAT from Inside to outside, then outside to Inside. Meaning a internal client trying to access an internal server with an external address.

I don't want to manage an internal DNS server just for this.

Thanks
0
Comment
Question by:binele
2 Comments
 
LVL 79

Expert Comment

by:lrmoore
ID: 24733249
Your best bet is an internal web server, or even host files if internal clients are few and are desktops. The problem is with the order of packet processing and NAT and this "hairpin" feature is not supported in IOS.

If the client resolves to the public ip address, and receives a packet from the private address of the server, the client drops the packet.
We can fix this with a feature of ASA firewall called 'dns doctoring' which actually intercepts the dns request that comes back from the external dns server and replaces the public ip with the private ip, so as far as the client is concerned, it resolved to the internal IP. No such luck or feature on IOS router.
0
 
LVL 4

Accepted Solution

by:
nasirsh earned 500 total points
ID: 24734350
Why do you want your internal Clients to access your mail server via outside. You can give them access to it via its internal IP. If you want to give them the external access then you have to fo outside-inside NAT and vice versa to your mailserver and make sure that your mailserver has the default gateway of the routers internal Interface.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Comware OS Simulator and GNS3 5 166
Simple Router Management, Subnets and VLANs e.g. RV0xx 7 67
Cisco Licensing for Wi Fi 4 41
Layer 3 switch recommendation 15 48
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

680 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question