cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Join Customer Connection to register!
653
Views
0
Helpful
0
Replies
telsi
Beginner

Translate private/public ip adress with nat?

Hi,

we are connected to the internet by a CISCO 886 VA. We are sharing one static outside ip.

In our network the clients have internal ip.

10.8.1.0/24

We also have a ipsec tunnel to the noc, where our webservers are hosted.

10.8.1.3/24

All traffic is overloaded to dialer interface with nat. Except traffic to ipsec tunnel.

For name resolution we use the DNS of out ISP.

This is working very well so far.

Now my problem:

Since we don't have a internal DNS with internal addresses resolved, the DNS queries are answered with public ip.

And since all public IP won't be routed via ipsec tunnel, the request leave the private net to the outside.

We used to have a PIX running and had the firewall translate the ip adresses resoltuion to a private address, when accessed from inside.

static (inside,outside) 199.199.199.1 10.8.3.1 dns netmask 255.255.255.255 0 0

This worked quite well.

Is there something on the 886 we could use?

This is not working:

ip nat inside source static 199.199.199.1 10.8.3.1

Can someone give me a clue?

Thanks.

0 REPLIES 0