Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm configuring a small network at work, and I have some problem.

  • We're assigned 4 external IPs. I have them in range 173.228.60.35 to 173.228.60.38.
  • I mapped one of the global IPs to local IP by NAT, by so that I can access the machine from the outside network. In Cisco configuration, it was ip nat inside source static 192.168.24.52 173.228.60.37

And I configured other settings, and opened up other ports so I can ssh into the machine. However, the problem is, I cannot access the local machine 192.168.24.52 by the ip 173.228.60.37.

I was wondering if it's possible to access the local machine by the global IP.

share|improve this question
1  
I'm not following. 173.228.60.35 and 173.228.60.38 are both external addresses. Are you trying to map 173.228.60.35 to 173.228.60.38, or to 192.168.24.52? Also, you put 173.228.60.37 in your cisco line, so that's also confusing. –  Satanicpuppy May 17 '11 at 19:28
add comment

2 Answers

DNS is by far the simplest - resolve to the internal IP internally - but there are other options. You can use policy-based routing to get the traffic to actually translate, though it might require a loopback as the actual NAT interface.

share|improve this answer
add comment

Ciscos don't allow access to external NAT address from inside. The traditional way to solve this is by using split DNS: when resolving the name of the server in question, external users should receive 173.228.60.37, and internal users should receive 192.168.24.52.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.