Access internal IP address using External address

[ryanaud]

In my current setup we have a PIX 506E. I have sales reps that come on site once or twice a month and in order for them to use their software on site we have to change the software config files to the internal address. I am looking for the solution to use the external address all the time and not have to switch when they come on site. I understand from some friends that there is a loop back setting that I need to setup, that is disabled by default, but they can't remember the name of the setting. Is there anyone that can help me on this please. I have tried setting up aliases, and different static(inside,outside) commands.
Thanks in advanced

-Ryan

 

[GM2005]

Am I right in saying you want the reps to be able to connect to your network remotely?

 

[ryanaud]

The can already connect off site remotely, I want for them to be able to use the external IP address when their on site so that I don't have to manually change the IP address to the internal.

 

[brianinms]

So basically you have punched a hole in your firewall for them to be able to work remotely? Your answer would be to use dns to solve this issue. Do you run your own internal dns server?

 

[ryanaud]

No we don't we use our ISP as our DNS server.

 

[brianinms]

You should setup a VPN for them to use when not in the office and configure their client for the internal ip address. Thus it doesnt matter if they are internal or external it will always work.

 

[ryanaud]

I have thought of this, but I would like to have the capability of using the external IP address internally also for development. We design a lot of applications that would be nice to test then with the external address.

 

[brianinms]

I don't see how testing an application with a public Ip would be different than using a private ip. However, the inherent nature of the pix is that traffic that goes in an interface can't come out that interface. If you are using dns names and not actual Ip addresses you could use the alias command to do a dns rewrite and it would go to the machine by the private ip address.

 

[ryanaud]

I have tried using an alias, but can't get it to work either. I was told by some of my friends that there is some kind of a loop command that can be used, do you have a clue what command they are talking about. They are looking for it but have no luck in the search.

 

[brianinms]

There isn't a loop command in the pix, and alias would only work if you had the clients configured to go to xxx.mycompany.com. You could use the alias to rewrite the dns request for xxx.mycompany.com to your local ip address.