Accessing outside NAT'd IP address from Inside

[SteveGodfrey]

We have a full class C subnet on the PIX outside interface, part of this range is being used for static NAT for various www servers. Our intranet servers are accessed using the ouside NAT'd IP address rather than the real IP and we're having problems accessing the www servers. The problem isn't be caused by an ACL as I have permit all at the moment.

Interestingly if I change the subnetting so the NAT ranges are in a different subnet to the PIX outside interface the www servers become available.

Obviously changing the subnetting like this means all traffic goes out to the ISP router then comes back into the PIX which seems a little messy to me, is there any other way around this other than changing the IP addresses the intranet is accessed on?

Thanks in advance

[p-hogan]

Is it possible to show sections of the config, including all the nat , global and statics statements

[tvanginneken]

Hi,

please have a look at this URL:

http://www.cisco.com/warp/public/110/alias.html

The 'DNS Doctoring' section might interest you.

Kind Regards,

Tom

[SteveGodfrey]

Many thanks that is exactly what I'm after!