Hi,
we are connected to the internet by a CISCO 886 VA. We are sharing one static outside ip.
In our network the clients have internal ip.
10.8.1.0/24
We also have a ipsec tunnel to the noc, where our webservers are hosted.
10.8.1.3/24
All traffic is overloaded to dialer interface with nat. Except traffic to ipsec tunnel.
For name resolution we use the DNS of out ISP.
This is working very well so far.
Now my problem:
Since we don't have a internal DNS with internal addresses resolved, the DNS queries are answered with public ip.
And since all public IP won't be routed via ipsec tunnel, the request leave the private net to the outside.
We used to have a PIX running and had the firewall translate the ip adresses resoltuion to a private address, when accessed from inside.
static (inside,outside) 199.199.199.1 10.8.3.1 dns netmask 255.255.255.255 0 0
This worked quite well.
Is there something on the 886 we could use?
This is not working:
ip nat inside source static 199.199.199.1 10.8.3.1
Can someone give me a clue?
Thanks.
