NAT question

[felihad]

Hello,

I configured a cisco 2620 as nat box.

Everything works ok, user can go out and surf, user can come in and connect to specifics hosts on specific ports, like remote desktop, secure shell, ftp, etc.

My situation is that everything is behind that nat box in a private network 192.168.10.x, so, when i tried to browse an internal web site using the public nat address i can not see it, for instance:

I have web server: internal ip 192.168.10.x and an external nat address of 64.xxxxx, so, if i am internally and try to go to

http://www.xxx.com

our dns will resolve to the public ip's and do like a double nat and i think this is no possible.

Please help.

 

[ChrisAC]

Set up a host file on your internal PC that maps

http://www.website.com

to the internal IP address.(I would have used

http://www.xxx.com

but that's a real website you know ;-))

Or, you can set up an internal DNS servers that maps it.

Chris.




**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************

 

[felihad]

Thanks ! Chris i will try a let you know. oops ! i did not realize that xxxxxxx was real web site.

 

[lui3]

you should also be able to setup acl on the dns server to deny accept requests based on ip address of the client request so that the ip address served back is internal or external.