ANNOUNCEMENT - The community will be down for maintenace this Thursday August 13 from 12:00 AM PT to 02:00 AM PT. As a precaution save your work.
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
937
Views
0
Helpful
2
Replies
Highlighted
Beginner

how to configure cisco 857's firewall to allow access from LAN?

i have a server with a private ip of 192.168.0.2, and NAT http port 80 to 192.168.0.2 so the outside world can access the web...

but my computer on the same lan as the server cannot use the domain name or public ip to access the web...i must use the http://192.168.0.2 to access. how to configure cisco 857 so i can use http://mydomain to access?? thanks!!!!!

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

how to configure cisco 857's firewall to allow access from LAN?

From internal network, you would need to use the private IP as the public IP is a virtual IP and NATing only happens when traffic actually traverse the LAN and the WAN/Internet interface. If you are from the LAN network, you would not traverse through the WAN/Internet interface hence it's not working when you are connecting to its public IP.

I would suggest that you resolve the domain name to private IP if you have an internal dns server when you are connected to your internal network.

View solution in original post

2 REPLIES 2
Highlighted
Cisco Employee

how to configure cisco 857's firewall to allow access from LAN?

From internal network, you would need to use the private IP as the public IP is a virtual IP and NATing only happens when traffic actually traverse the LAN and the WAN/Internet interface. If you are from the LAN network, you would not traverse through the WAN/Internet interface hence it's not working when you are connecting to its public IP.

I would suggest that you resolve the domain name to private IP if you have an internal dns server when you are connected to your internal network.

View solution in original post

Highlighted
Beginner

how to configure cisco 857's firewall to allow access from LAN?

i had though that before,, but then every time i add the host record, i need to add in two places.... and if i update sub domain pointed to somewhere else, i need to update in two places too... isn't there a better way to accomplish this?