Cisco 2911 NAT to DNS server

[Sergey Gureev]

Hi.

I have cisco router 2911 (Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.2(3)T, RELEASE SOFTWARE (fc1)

In local nework i have public DNS server with our domain,

On the cisco router i have

ip nat inside source static tcp 192.168.10.2 53 ISP_IP 53 extendable

ip nat inside source static udp 192.168.10.2 53 ISP_IP 53 extendable

I turn off any firewalls on both sides and on DNS server. But when i try to resolve my dns zone on my server from outside I have connection time out.

In the local network anything is worked.

tcpdump on server show that request packet to the server arrived. And i see response on this server interface.

So i don't understant what i need to do?

[Sergey Gureev]

May be I make questiion incorrect. But in my local network anythink is workin. i needs make posible dns quires from outside to inside. Because my dns server is NS for my internet domain.

I

[Sergey Gureev]

YEEES. I Found IT!!!

ip nat inside source static tcp 192.168.10.2 53 ISP_IP 53 extendable no-payload

ip nat inside source static udp 192.168.10.2 53 ISP_IP 53 extendable no-payload

And anythig worked!!!!