Outside host to inside server

[swashbuckler]

I have a outside host 89.254.12.35 that needs to access a server inside my network via port 80. The client server is 10.200.1.213. He cannot seem to be able to access. I have the following ACL in place.

access-list 100 extended permit tcp host 89.254.12.35 host 10.200.1.213 eq www

Wondering if it is on my end.

Thanks in advanced.

Bobby

[cadet alain · Accepted solution]

Hi,

If you've configured static PAT:

ip nat inside source static tcp 10.200.1.213 80 x.x.x.x  80  where x.x.x.x is the external IP where NAT outside is configured then you should use this public IP as the destination in the ACL you provided.

Regards

Alain

Don't forget to rate helpful posts.

[swashbuckler]

Even if I am using nonat..

nat(inside) 0 access-list nonat

Should I create a static nat and use the ip of my outside interface.

Thanks,

[Kelvin Willacey · Accepted solution]

Are you using an ASA? You will still need a static NAT as Alain indicated.