Solved

NAT Inside to Inside

Posted on 2009-06-28
2
779 Views
Last Modified: 2012-05-07
I have an internal network, with an internal mail server.

When I do an DNS lookup for my mail server, it goes to

203.xxx.xxx.xx which is a public address.

The router is set up to do a port forward back to the internal 192.168.2.2 address if it's an external address.

However, the traffic doesn't seem to reach the mail server when the client is internal.

How do I setup the CISCO 877 router to

1. Do NAT from Inside to outside, then outside to Inside. Meaning a internal client trying to access an internal server with an external address.

I don't want to manage an internal DNS server just for this.

Thanks
0
Comment
Question by:binele
2 Comments
 
LVL 79

Expert Comment

by:lrmoore
ID: 24733249
Your best bet is an internal web server, or even host files if internal clients are few and are desktops. The problem is with the order of packet processing and NAT and this "hairpin" feature is not supported in IOS.

If the client resolves to the public ip address, and receives a packet from the private address of the server, the client drops the packet.
We can fix this with a feature of ASA firewall called 'dns doctoring' which actually intercepts the dns request that comes back from the external dns server and replaces the public ip with the private ip, so as far as the client is concerned, it resolved to the internal IP. No such luck or feature on IOS router.
0
 
LVL 4

Accepted Solution

by:
nasirsh earned 500 total points
ID: 24734350
Why do you want your internal Clients to access your mail server via outside. You can give them access to it via its internal IP. If you want to give them the external access then you have to fo outside-inside NAT and vice versa to your mailserver and make sure that your mailserver has the default gateway of the routers internal Interface.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
When it comes to security, there are always trade-offs between security and convenience/ease of administration. This article examines some of the main pros and cons of using key authentication vs password authentication for hosting an SFTP server.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now