troubleshooting Question

Can Cisco resolve internet address internally

Avatar of jgrammer42
jgrammer42 asked on
RoutersCiscoDNS
4 Comments1 Solution140 ViewsLast Modified:
Here is the situation.  I have an internet domain of CORPORATION.COM

Exchange is the mail server with the DNS name of MAIL.CORPORATION.COM on the internet.

MAIL.CORPORATION.COM is used by laptop, (for example), for Outlook Anywhere access.

MAIL.CORPORATION.COM resolves to internet address of 200.250.192.100  (again, just an example)

My Cisco ASA NAT's the external IP of 200.250.192.100 to the internal LAN address of 192.168.1.50

All of that works great.  No problems.

However, when someone with a laptop comes into the corporate office, and tries to resolve the name of MAIL.CORPORATION.COM,  the internet DNS responds with 200.250.192.100 which the Cisco is unable to resolve or map back to the internal network of 192.168.1.50, which is the Cisco's internal known IP network.

For years, the way around this is to set up on the INTERNAL LAN DNS a CORPORATION.COM domain, that all local LAN clients would use to resolve back to the internal LAN network of 192.168.1.y, instead of to an external Internet address.

Frankly, I HATE that solution.  I always thought it was kludgy at best.

So, the question is this, is there a way to configure the Cisco that if it sees an internet address that maps to its known internal LAN network IP, it will automatically respond back with that internal LAN address instead of just getting stuck in a loop?

Thank you in advance,
Jeff
ASKER CERTIFIED SOLUTION
Craig Beck
Network Architect and EE TA
Join our community to see this answer!
Unlock 1 Answer and 4 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 4 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros