Skip to main content

NATed IP issue

More
14 years 6 months ago #34544 by Alans
Replied by Alans on topic Re: NATed IP issue
Thanks S0lo, now i'm able to ping DMZ's public IP from inside but can't ping their local ip which is not needed now.

One more question, can a server ping it's NATed public IP?

always Face your Fears...
More
14 years 6 months ago #34565 by S0lo
Replied by S0lo on topic Re: NATed IP issue

Thanks S0lo, now i'm able to ping DMZ's public IP from inside but can't ping their local ip which is not needed now.


I guess every solution breeds new problems!! :?

One more question, can a server ping it's NATed public IP?


Yes it can be done, But it's probably not the typical way to do things. Here it is any way:

[code:1]same-security-traffic permit intra-interface
static (inside,inside) x.x.x.x 192.168.3.x netmask 255.255.255.255[/code:1]

The first line is necessary because by default, traffic is not allowed to exit the same interface it entered from.The second line is obviously a static NAT from inside to inside.

If any one else has a better idea, please shout.

Studying CCNP...

Ammar Muqaddas
Forum Moderator
www.firewall.cx
Time to create page: 0.133 seconds