topic If i use my 4G connection on in Network Security

Nat Hairpin - Cisco ASA 9.1

allansarby1108 — Tue, 12 Mar 2019 07:17:53 GMT

Looking to connect from my work computer to my DMZ server using its external IP address.

Internal work computer IP: 192.168.1.35 /24

DMZ server IP: 192.168.10.11 /24

External IP address: 5.103.x.x (i only have a single ip address)

Can anyone help me out?

Hi,

Salem Neaz — Sun, 14 Feb 2016 12:47:23 GMT

Hi,

Make sure that the DMZ server is reachable from the internet, or configure remote access VPN at the firewall.

Thanks.

If i use my 4G connection on

allansarby1108 — Sun, 14 Feb 2016 12:59:13 GMT

If i use my 4G connection on my work computer from my Phone, then i access the server without any problems

I've tried to use this guide,

allansarby1108 — Sun, 14 Feb 2016 14:16:03 GMT

I've tried to use this guide, but i dont think it will work. as my server uses UDP and not TCP

https://supportforums.cisco.com/document/69261/hairpinu-turn-traffic-interface-asa-running-83-or-later

Noone up for the task? 🙂

Hi,

Shivapramod M — Mon, 15 Feb 2016 01:26:27 GMT

Hi,

You do not need hairpin NAT here. Your communication is between the internal network to DMZ not between the DMZ and DMZ. As per my understanding the internal and DMZ are two different interfaces. Please correct me if I am wrong about the set-up

If that is the case you need a normal static NAT between internal and DMZ.

nat (DMZ, inside) source static <serverprivate_IP> <serverpublic_IP>

You can configure an access list in internal interface to permit the traffic between these two private IP address. Please note that UDP and TCP both has same NAT configuration, you can allow or deny the flow using the ACL.

Thanks,
Shivapramod M
Please remember to select a correct answer and rate helpful posts

I'll gladly try your

allansarby1108 — Mon, 15 Feb 2016 12:15:05 GMT

I'll gladly try your suggestion, not sure it will work.

I've added a network diagram, maybe the issue will make more sense then?