PIX/ASA Access static nat from inside

[kent.plummer]

Hi,

It seems that the PIX/ASA does not allow an inside host to hit an static nat such as below on the external public IP 111.222.3.4.

static (inside,outside) tcp 111.222.3.4 80 10.200.4.20 80 netmask 255.255.255.255

I know this is what internal DNS is for but this customer does not want to run internal DNS.

The PIX seems to have a similar issue when you ssh to it in that you cant ssh to the outside interface if your traffic originates from the inside.

Has anyone tripped over a solution to these issues.

Thanks in advance for any assistance.

Kent.

[kent.plummer]

This doc explains all - except ssh to the asa external interface from the inside. Would appreciate any ideas on this.

"PIX/ASA: Perform DNS Doctoring with the static Command and Two NAT Interfaces Configuration Example"

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807968d1.shtml

Cheers

Kent.