topic When local clients 192.168.10 in Network Security

Allow inside host to access inside server through its outside IP?

anders.lindback — Tue, 12 Mar 2019 04:14:11 GMT

Hi everyone, I need some 9.1 NAT help!

Got a subnet,.. 192.168.10.0/24 .. on this subnet both clients and servers are located.

I'm currently NAT'ing (server) 192.168.10.10 to our outside interface IP and allowing ports 80 from the Internet.

Now, our inside clients needs to access the server through our external DNS that points at the ASA outside interface..

How do I do this NAT config?

Like this

192.168.10.0/24 -> External IP -> Inside server IP

Is this correct?

Object network Internal_To_Server_192.168.10.10

host 192.168.10.10

nat (Outside,Inside) static <external ASA outside IP> 80 80

is that correct?

Thanks

Try this:object network

WALTER GROSSENBACHER — Fri, 23 May 2014 09:21:20 GMT

Try this:

object network INSIDE-SERVER

host 192.168.10.10

object network INSIDE-SERVER

nat (inside,outside) static <outside-ip>

That will get my server the

anders.lindback — Fri, 23 May 2014 09:26:50 GMT

That will get my server the external Ip address of the ASA

I need my inside hosts to be able to connect to the that outside IP and get it pointing inwards at 192.168.10.10

old NAT

static (outside,inside) <external ip> 192.168.10.10 service www .. i think.. been awhile since I did ASA config.

I don't know what you are

WALTER GROSSENBACHER — Fri, 23 May 2014 10:50:31 GMT

I don't know what you are looking for. Is it a NAT from an external IP to an internal address or the opposite way? Can you tell me which address you wonna NAT to which address & from which interface to which interface. Maybe you have even a drawing....

cheers

Walter

When local clients 192.168.10

anders.lindback — Fri, 23 May 2014 11:33:36 GMT

When local clients 192.168.10.0/24 tries to go to (http) 213.10.10.10 that they should be directed to 192.168.10.10 instead.

"213.10.10.10" is the outside IP address of the ASA just a fyi

In this case try this object

WALTER GROSSENBACHER — Fri, 23 May 2014 11:44:40 GMT

In this case try this

object network OUTSIDE-SERVER

host 213.10.10.10

object network OUTSIDE-SERVER

nat (outside,inside) static 192.168.10.10

Thanks, I'll give this a go

anders.lindback — Fri, 23 May 2014 13:26:00 GMT

Thanks, I'll give this a go and get back to you if it works!

I did not get this to work,

anders.lindback — Mon, 26 May 2014 14:51:28 GMT

I did not get this to work, Cisco TAC did a static NAT instead

nat (Inside,Inside) 1 source static obj-Internal_Networks obj-Internal_Networks destination static obj-213.10.10.10 obj-192.168.10.10 service desthttp desthttp

I need to start learning 8.3 updates 😄

Thanks for the help!