topic Re:inside host available to inside users by External IP in Network Security

inside host available to inside users by External IP

johnramz — Tue, 12 Mar 2019 02:41:40 GMT

Pix 515 6.3.5

I have this configuration

static (outside,inside) 1.1.1.1 192.168.1.1

access-list ACL permit tcp any host 1.1.1.1 eq https

In this case all users from OUTSIDE can access the server by IP 1.1.1.1

Because of a special case that I do not want to resolve with DNS zones and "A" records, I need to make this same host available to INSIDE users by same external IP: 1.1.1.1

How can this be accomplished?

Thanks

Juan

Re:inside host available to inside users by External IP

jj27 — Sat, 21 Sep 2013 15:27:47 GMT

Try adding the "DNS" keyword at the end of your static NAT statement. DNS rewrite should occur and point it to the internal IP.

Sent from Cisco Technical Support Android App

Re:inside host available to inside users by External IP

johnramz — Sat, 21 Sep 2013 17:06:43 GMT

ljohnston1127,

Possibly, I did not explain myself well. That configuration there works fine for external users accessing the external IP 1.1.1.1.

What I want to is to make possible for the INSIDE/internal users to access that server with the EXTERNAL ip 1.1.1.1 . Users in the INSIDE zone can acccess host by internal ip 192.168.1.1 . I want them to access it by External IP.

Hopefully I am making sense.

Thanks

Juan

inside host available to inside users by External IP

Antonio Simoes — Sat, 21 Sep 2013 23:31:05 GMT

Hi,

What is your intention to do that?

Go out of your network to get back again to access info that is inside?

Re:inside host available to inside users by External IP

jj27 — Sun, 22 Sep 2013 02:12:53 GMT

Nevermind. You are not using dns.

Sent from Cisco Technical Support Android App