greenbeanx81
asked on
How to make an external address appear on ther inside for clients?
Hello all,
I have an interesting problem. I have a client a DVR that is at 192.168.1.2. The DVR has an address on the outside of a Cisco ASA. The client wants to use the outside address when inside the network and connect to the DVR at 192.168.1.2. That means the client would type the external address from inside. It would hit the inside interface of the ASA. The ASA would then redirect and route to the DVR inside the network. I think the ASA would use the same-security interface command and some sort of Nat command. Problem is I would like the outside clients to continue being routed to the DVR. I was thinking of some sort of static command ex. static (inside, inside) 208.x.x.x 192.168.1.2 netmask 255.255.255.255. Would this work? I know there was an alias command in the PIX and there is NAT and Static command with DNS doctoring? What do you think? Thank you.
Daniel Duarte
I have an interesting problem. I have a client a DVR that is at 192.168.1.2. The DVR has an address on the outside of a Cisco ASA. The client wants to use the outside address when inside the network and connect to the DVR at 192.168.1.2. That means the client would type the external address from inside. It would hit the inside interface of the ASA. The ASA would then redirect and route to the DVR inside the network. I think the ASA would use the same-security interface command and some sort of Nat command. Problem is I would like the outside clients to continue being routed to the DVR. I was thinking of some sort of static command ex. static (inside, inside) 208.x.x.x 192.168.1.2 netmask 255.255.255.255. Would this work? I know there was an alias command in the PIX and there is NAT and Static command with DNS doctoring? What do you think? Thank you.
Daniel Duarte
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Setup your dns server to host the companies public domain (for internal use only)
Internally, the person would go to DVR.example.com which would resolve to the 192.168.1.2 address whilst externally DVR.example.com would resolve to the public address.
Save potential headaches with NAT and allows for private/public address changes without the client needing to remember the changes.
Cheers
Matt