cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
652
Views
0
Helpful
2
Replies

Can't ping inside global address from inside network

NInja Black
Level 1
Level 1

Hi,

The following is the nat for an ftp server

ip nat inside source static 10.x.x.11 50.x.x.x5

All working fine but I am unable to ping to the inside global (50.x.x.x5) ip from inside the network.

Any help will be highly appreciated. Thanks

1 Accepted Solution

Accepted Solutions

cadet alain
VIP Alumni
VIP Alumni

Hi,

This is because of NAT hairpinning and to achieve this one way is to use NAT NVI instead of "classic NAT":

change ip nat in and ip nat out by ip nat enable on all nat interfaces then change ip nat inside source static command by ip nat static command and to finish disable ip redirect on al NAT interfaces.

Regards

Alain

Don't forget to rate helpful posts.

Don't forget to rate helpful posts.

View solution in original post

2 Replies 2

cadet alain
VIP Alumni
VIP Alumni

Hi,

This is because of NAT hairpinning and to achieve this one way is to use NAT NVI instead of "classic NAT":

change ip nat in and ip nat out by ip nat enable on all nat interfaces then change ip nat inside source static command by ip nat static command and to finish disable ip redirect on al NAT interfaces.

Regards

Alain

Don't forget to rate helpful posts.

Don't forget to rate helpful posts.

Ah! I knew it had to do with NAT but couldn't figure out what as everything seemed right with nat i used.

Thanks for clarifying that out.