10-02-2014 07:09 AM - edited 03-04-2019 11:52 PM
First, I just want to say, I'm not sure I'm posting this in the community Hierarchy. Sorry. Anyway, here's it goes. Also, I'm getting a lot of "posting in this community has been disabled".
For example purposes, I will use these IPs:
Public ip addresses:
10.10.145.26 - is assigned to the Outside Interface
10.10.145.29 - is translated to internal exchange server ip address 192.168.1.25.
From the internet, I can access my internal exchange server using https://10.10.145.29. Also, a cisco tech confirmed that the translation is working.
The question arises when I browse to ipchicken.com or other similar sites. I'm browsing from internal exchange server and ipchicken.com displays public ip address assigned to the firewall outside interface(10.10.145.26 ). I was expecting to see 10.10.145.29. Why?
10-02-2014 07:16 AM
Those websites always show the outside IP address of your Edge Facing device. Doesn't check NAT translations.
10-02-2014 11:40 AM
Thank you.
10-02-2014 10:22 AM
Is this a static 1 to 1 NAT translation? Have you tried omitting this address for the ACL that is part of your NAT overload (PAT) statement?
10-02-2014 11:41 AM
1 to 1 NAT translation.
11-30-2014 08:36 PM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide