Access external IP from the same server with NAT

[wangchung617]

Is it possible to access the server's external address from a NATed internal address?

For example, I have a server set up with static NAT with an external address of 63.0.0.10 and a static NAT internal address of 192.168.1.10. It's running a web server so I have port 80 allowed though the PIX. The DNS entry for the site point to the 63 (external address-so the rest of the world can browse it) When I try accessing the website via the URL from the server, I'm unable to access it since it's pointing to the 63 address which I can't seem to ping from the inside.

I have icmp-echo allowed through, so from an external site, I can ping all the 63 addresses and get responses. But no response from the inside. Any ideas on rules or routes that I may need?

 

[br0ck]

The nature of NAT/PAT will not allow traffic flow in this manor.

Is this server/service on the LAN or in the DMZ?

If it is on the LAN then you can use internal DNS to setup a zone and records that mimic your public DNS allowing people to surf to the hosted site with domain.com hitting the 192.168.x.x interface.

If it is in the DMZ then you need the proper statcis and access lists to allow traffic to the DMZ host

 

[boymarty24]

Setting up a internal dns is the best way to go ímo. But you canuse the alias command for ip resolution.

http://www.cisco.com/en/US/products...erence_chapter09186a00801727a3.html#wp1083304

Be careful though the times i have played with this command i ended with some strange network problems.

 

[Supergrrover]

Here are a few examples of the alias and DNS rewrite commands

alias config example for 6x code -

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094aee.shtml

or use inspect and DNS re-write for 7x code

http://www.cisco.com/en/US/products..._guide_chapter09186a008054c520.html#wp1335632

Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[wangchung617]

Thanks, those alias command references look like something that could work. Just need to find a good time to test it out.