help on nating for internal web server

[raju jadhao]

Hi, I have internal web server with IP Address 172.16.100.8 which is natted with public ip  My requirement is that I should able to access the web server internally (on local LAN) with public ip I checked this on Cisco and I am able to find out the following We normally define ip nat inside on local interface and ip nat outside on outside interface. INSTEAD OF THIS WE SHOULD USE ip nat enable on both interfaces to enable this. My current NAT Statement is as follows Ip nat inside source static 172.16.100.8 public ip  WHICH NEEDS TO BE CHANGED AS Ip nat source static 172.16.100.8 public ip Let me know is this a correct way of doing this and if yes then what are the implications of this.

[Philip D'Ath]

Can you please re-format your post to make it easier to read.

What platform is this one?

[raju jadhao]

hi thanks for response.....

1) we have a local web server nated on public ip for external user for access.bur our requirement is internal user can access web server via internal ip as well as public ip is it posibale on router.

2) we don't have any firewall and dns server.

pls reply...

[Philip D'Ath]

You didn't answer my question.  What platform is this?  Router?  ASA?

[raju jadhao]

router........

[Philip D'Ath]

What model router?

I think I would enable the local DNS server, and configure a static host entry for the server pointing to its private IP address.

[raju jadhao]

Cisco 2811

[Philip D'Ath]

Are you able to post your config?

Enable the DNS server with something like:

ip dns server

Configure your machine to use the router as your DNS server, and make sure you can lookup ordinary DNS entries, like www.google.com.

Then define a static host to IP address mapping, pointing the external URL to the internal IP address of your server.

ip host fqdn.com 192.168.x.x

[raju jadhao]

interface FastEthernet0/0
ip address 172.16.100.2 255.255.255.0
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
service-policy input block
!
interface FastEthernet0/1
bandwidth 15360
ip address X.X.X.X 255.255.255.252
ip flow ingress
ip nat outside
ip virtual-reassembly in
duplex full
speed 100
crypto map MUPUVPN
service-policy output VOICEQoS

ip nat inside source route-map NONAT interface FastEthernet0/1 overload
ip nat inside source static 172.16.100.8 My public ip

[raju jadhao]

hi, i am waiting for your reply.....

[Philip D'Ath]

Did you try this?

[raju jadhao]

not yes i am confusing ...pls guide me

[raju jadhao]

any  example configuration for it....