Help with accessing a forwarded Public IP internally

[RatherBeSkiing]

Hi,

I have a webserver on our internal network which has an external IP address forwarded to it as below.

static (inside,outside) 199.xxx.190.xxx 10.1.1.3 netmask 255.255.255.255 0 0

All is working fine externally, but I want internal users to be able to use the same web address as external users, so I looked at adding an alias line

alias (inside) 10.1.1.3 199.xxx.190.xxx 255.255.255.255

Am I correct in thinking that this doesn't work because I'm using an internal DNS server?

Can anyone help with an alternative setup, one suggestion I have had is to setup a DMZ with the following lines...

static (dmz,outside) 199.xxx.190.xxx 10.1.1.3 netmask 255.255.255.255 0 0

static (dmz,inside) 199.xxx.190.xxx 10.1.1.3 netmask 255.255.255.255 0 0

I think I can see the thought behind this but the PIX will not allow the second static command because of security levels.

Any suggestions greatly appreciated.

 

[gconnect]

If you are using an internal DNS Server, then just adjust your DNS zone(s) as needed .

If your dns server was external consider:
static (inside,outside) 199.xxx.190.xxx 10.1.1.3 netmask 255.255.255.255 0 0 dns

Do you have a DMZ network or are you just considering it at this point?

 

[F1lby]

http://www.tek-tips.com/faqs.cfm?fid=6029