cisco 800 port forward on LAN only

[pedja]

Hi,

Is there a way to do port forwarding only on LAN?

Port forward from LAN Ethernet0 port 80 to web-server (LAN) port 80.

version 12.3
interface Ethernet0
 ip address 10.1.1.250 255.255.255.0
 ip nat inside
!
ip nat inside source static tcp 10.1.1.251 80 10.1.1.250 80 extendable

[balaji.bandi]

If this is inside same network  why do you need port-forward, it should work as expected, when you access from PC 10.1.1.X  to 10.1.1..251 ?

or you see any issue here ?

[pedja]

It is simplified scheme.

you can't access directly from PC 10.1.1.X to 10.1.1.251 on port 80 (blocked by local firewall on 10.1.1.251)

Only way is to access from PC 10.1.1.X to router(10.1.1.250), and then port forward to 10.1.1.251