Access local web server from LAN using IP on WAN port

[kolob4all]

Hello all,

I think it's a common situation but I haven't faced it before with Cisco routers.

Lan - 192.168.1.0
Wan - 222.222.222.222
Web server - 192.168.1.10

aaa.com DNS record points to 222.222.222.222

We have web-server behind 2911 router. With NAT we have no problems accessing it from outside. But when local users are trying to access it, DNS points it to Public IP on WAN and firewall just drops packets.

Question:

How to set up Cisco router to send traffic back to Wev-server's LAN IP if request is coming from LAN to it's WAN IP?

Hope I described it clear. Had no problems with Junipers but never done it with Cisco

 

[dgrizzard]

I would recommend using an internal DNS server with a different address. Other than that you would need to use a static NAT entry internally to take that destination address on the internet and translate it to the internal address.

 

[kolob4all]

DNS is the easiest way, also HOST file can be modified on the PC or script pushed from DC with HOST file modification.

BUT!!!

question was how to make it work on Cisco 2911 router

 

[unclerico]

dgrizzard told you how to do it. the only easy way to make it happen on IOS is to use static NAT. if you were using ASA devices you could implement DNS rewriting.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[kolob4all]

Static NAT is in place. But it works only when request is coming from Internet, but what if request is coming from LAN, going to WAN int and coming back to LAN?

Can we make static NAT to direct it straight to local server on LAN?

It's IOS not ASA