topic Access server from remote site via routers and firewall in Network Security https://community.cisco.com/t5/network-security/access-server-from-remote-site-via-routers-and-firewall/m-p/1514193#M606775 <P>Hi!</P><P></P><P>As per the diagram, each remote site will need to access the server situated in the main site.</P><P>I have configured the routers and firewall.</P><P>Please check if this configuration will work.</P><P>See attached the configurations and diagram.</P><P></P><P>Regards,</P><P></P><P>Alvin</P> Mon, 11 Mar 2019 19:09:36 GMT net buzz 2019-03-11T19:09:36Z Access server from remote site via routers and firewall https://community.cisco.com/t5/network-security/access-server-from-remote-site-via-routers-and-firewall/m-p/1514193#M606775 <P>Hi!</P><P></P><P>As per the diagram, each remote site will need to access the server situated in the main site.</P><P>I have configured the routers and firewall.</P><P>Please check if this configuration will work.</P><P>See attached the configurations and diagram.</P><P></P><P>Regards,</P><P></P><P>Alvin</P> Mon, 11 Mar 2019 19:09:36 GMT https://community.cisco.com/t5/network-security/access-server-from-remote-site-via-routers-and-firewall/m-p/1514193#M606775 net buzz 2019-03-11T19:09:36Z Re: Access server from remote site via routers and firewall https://community.cisco.com/t5/network-security/access-server-from-remote-site-via-routers-and-firewall/m-p/1514194#M606776 <HTML><HEAD></HEAD><BODY><P>Hi Alvin,</P><P></P><P>global (outside) 3 10.0.0.30 netmask 255.255.255.255<BR />nat (inside) 3 ServerIP 255.255.255.255</P><P></P><P>What is this for ?</P><P></P><P>Also, at the remote site you should be adding a route for the Server IP address specifying the Main Router's IP address as the next hop.</P><P></P><P>Cheers,</P><P><BR />Avinash.</P></BODY></HTML> Mon, 15 Nov 2010 12:51:48 GMT https://community.cisco.com/t5/network-security/access-server-from-remote-site-via-routers-and-firewall/m-p/1514194#M606776 apothula 2010-11-15T12:51:48Z Re: Access server from remote site via routers and firewall https://community.cisco.com/t5/network-security/access-server-from-remote-site-via-routers-and-firewall/m-p/1514195#M606778 <HTML><HEAD></HEAD><BODY><P>Dear Avinash,</P><P></P><P>In the remote site router I have already added the network route:</P><P></P><P><STRONG>ip route 172.30.4.1 255.255.255.255 192.168.1.1</STRONG></P><P></P><P>where <STRONG>192.168.1.1</STRONG> is the WAN IP address of the main router.</P><P></P><P>The <STRONG>ip nat inside source static 10.0.0.31 172.30.4.1</STRONG> is supposed to NAT the <STRONG>10.0.0.31</STRONG> IP to <STRONG>172.30.4.1</STRONG> IP.</P><P></P><P>Are the <STRONG>global (outside) 3 10.0.0.30 netmask 255.255.255.255</STRONG> and <STRONG>nat (inside) 3 ServerIP 255.255.255.255</STRONG> not necessary to permit the server to connect to the remote sites.</P><P></P><P>Regards,</P><P></P><P>Alvin</P></BODY></HTML> Tue, 16 Nov 2010 07:19:59 GMT https://community.cisco.com/t5/network-security/access-server-from-remote-site-via-routers-and-firewall/m-p/1514195#M606778 net buzz 2010-11-16T07:19:59Z Re: Access server from remote site via routers and firewall https://community.cisco.com/t5/network-security/access-server-from-remote-site-via-routers-and-firewall/m-p/1514196#M606782 <HTML><HEAD></HEAD><BODY><P>Hi Alvin,</P><P></P><P>You already have a static translation configured for the server.</P><P></P><P>So, the nat global statements are not required.</P><P></P><P>Also, please be informed that dynamic pat (nat &amp; global) is unidirectional.</P><P><BR />Cheers,</P><P></P><P>Avinash.</P></BODY></HTML> Tue, 16 Nov 2010 07:32:37 GMT https://community.cisco.com/t5/network-security/access-server-from-remote-site-via-routers-and-firewall/m-p/1514196#M606782 apothula 2010-11-16T07:32:37Z Re: Access server from remote site via routers and firewall https://community.cisco.com/t5/network-security/access-server-from-remote-site-via-routers-and-firewall/m-p/1514197#M606784 <HTML><HEAD></HEAD><BODY><P>Ok Avinash.</P><P>But I still need the <STRONG>ip nat inside source static 10.0.0.31 172.30.4.1 </STRONG>command to further translate the server IP from <STRONG>10.0.0.31</STRONG> to <STRONG>172.30.4.1</STRONG> and then configure the remote router with the <STRONG>ip route 172.30.4.1 255.255.255.255 192.168.1.1.</STRONG></P><P></P><P>Regards,</P><P></P><P>Alvin</P></BODY></HTML> Tue, 16 Nov 2010 09:43:51 GMT https://community.cisco.com/t5/network-security/access-server-from-remote-site-via-routers-and-firewall/m-p/1514197#M606784 net buzz 2010-11-16T09:43:51Z Re: Access server from remote site via routers and firewall https://community.cisco.com/t5/network-security/access-server-from-remote-site-via-routers-and-firewall/m-p/1514198#M606785 <HTML><HEAD></HEAD><BODY><P>Yeah...sure</P></BODY></HTML> Tue, 16 Nov 2010 12:17:20 GMT https://community.cisco.com/t5/network-security/access-server-from-remote-site-via-routers-and-firewall/m-p/1514198#M606785 apothula 2010-11-16T12:17:20Z Re: Access server from remote site via routers and firewall https://community.cisco.com/t5/network-security/access-server-from-remote-site-via-routers-and-firewall/m-p/1514199#M606786 <HTML><HEAD></HEAD><BODY><P>Hi Alvin,</P><P><BR />Did it resolve the issue.</P><P></P><P>If so, please mark the issue as resolved so that we can give way to newer discussions.</P><P><BR />Cheers,</P><P></P><P>Avinash.</P></BODY></HTML> Wed, 17 Nov 2010 08:53:09 GMT https://community.cisco.com/t5/network-security/access-server-from-remote-site-via-routers-and-firewall/m-p/1514199#M606786 apothula 2010-11-17T08:53:09Z