Inbound Access with NAT Problem

[kerb9977]

Hi folks, Please help have fighting with this for a long time now.

Need an inbound access to a server beyond inside and need to translate my access from outside to my pix_ inside ip address.

Outside (10.X.X.25)-PIX- Inside(192.168.10.12)---Router---Router---Router---Server 192.168.20.X

The connection from pix inside to the server works fine with eigrp but how can I access the server from the outside. Understand that I need some nat on the inside to get it going, but I don't want to nat all traffic to inside.

Or can I have an map or som kind of relay from outside 10.X.X.26 to inside 192.168.10.12 wich then can connect to the server?

Many thanks in advanced

 

[jgiacobbe]

Sounds like you just need a static nat with an acces list on your outside interface to allow traffic in.

static (inside,outside) 10.X.X.26 192.168.10.12 netmask 255.255.255.255 0 0
Creates a staic NAT from 10.x.x.26 to 192.168.10.12

access-list example permit tcp any host 10.X.X.26 eq http
access-list example permit tcp any host 10.X.X.26 eq 3389

creates an acces list to allow http and windows rdp traffic to 192.168.10.12

access-group example in interface outside

applies the access list to a named interface called outside

clear xlate

clears the xlate table so that your new access list and static nat will take effect.

Look around on cisco.com there are several examples.

Jeremy Giacobbe
MCSE, CCNA

 

[boymarty24]

Did similiar configuration some time ago.

I did a static to the ip address behind the routers, your case 192.168.20.X. Then configure a route inside statement and voila...