I cant Access web server from our LAN 1

[hamidrezaa]

Dear Experts,
we have a 2851 router which interconnect our local network to public network. we recieve our internet on interface e0/1 and e0/0 restricted to our lan as below configs
int e0/0 192.168.10.1 255.255.255.0
ip nat inside

int e0/1 X.X.X.226 255.255.255.224
ip nat outside
! web server
ip nat inside source static x.x.x.245 192.168.10.9


! last resort
ip route 0.0.0.0 0.0.0.0 x.x.x.225

our users from internet can access our web server
but we cant access our web server with public address x.x.x.245 or
equivalent domain name and we can only access it with local address 192.168.10.9 in our lan.
how can we access our web server with public FDQN domain name or public ip address ?

regards

 

[cisconooblet]

Replace ip nat inside source static x.x.x.245 192.168.10.9

with

access-list 1 permit 192.168.10.0 0.0.0.255

ip nat inside list 1 interface e0/1 overload

CCNA, BCNE, Security+, Network +

 

[hamidrezaa]

Dear Cisconooblet
Can you tell me which public ip address was given for that computer?

Regards

 

[cisconooblet]

I typo'd the last line.

ip nat inside list 1 interface e0/1 overload

should be

ip nat inside source list 1 interface e0/1 overload.



I'm not sure of what to make of your question. Can you reword it?

CCNA, BCNE, Security+, Network +

 

[hamidrezaa]

thanks for your reply,
every computer should have a public ip address for interacting with outside.
if i replace
ip nat inside source static x.x.x.245 192.168.10.9
with
access-list 1 permit 192.168.10.0 0.0.0.255
ip nat inside list 1 interface e0/1 overload

we dont restrict our web server with public ip address(such as x.x.x.245) because you restricted private ip address for this work(access-list 1 permit 192.168.10.0 0.0.0.255).

how can i introduce my real ip address to world?

regards

 

[cisconooblet]

I think I missed the problem earlier. Your nat statement puzzles me though. I would have thought it wouldn't have worked the way it is at all. I've always put the inside address first and the global address second.

ex
ip nat inside source static 192.168.10.9 x.x.x.245

Have you tried it this way ?? Outside of trying that I'm out of suggestions. Maybe you could post a config and someone with a better eye can chime in as well.



CCNA, BCNE, Security+, Network +

 

[hamidrezaa]

I solved my problem with two dnses.
our nat have not any problems.
1- Internal dns
2- External Dns

Regards

 

[Cluebird]

Here is more information about what you had to do hamidrezaa for future reference.

https://supportforums.cisco.com/thread/2003063