Can I make a 2611 do this trick?

by karan on March 29, 2010

I’ve been told that because of the nature of NAT, I’m not going to be able to accomplish this, but let’s give it a try.

I’ve got a 2611 between a cable modem and the LAN at a soho location… Right now, if I’m on (the only block on) the LAN, I can’t access a server that is on the LAN side of the router by requesting it like I usually do, which is to resolve it as the static IP of the location and then forward it to the appropriate LAN IP based on the request.

Accessing the server from the outside of course works… That doesn’t help when I’m doing development from the inside that people will see from the outside.

I would like to assume that if the piece of crud DI-604 that the 2611 replaced was able to do something like this, perhaps someone may have figured a workaround for IOS driven products.

So, how do I say

“If requesting xxx.xxx.xxx.xxx from inside interface, turn around and send it to 192.168.0.xxx” ?

Thanks in advance… with all you gurus out there and considering my low level of knowledge, you should be able to overwhelm me in no time.

{ 3 comments… read them below or add one }

arul March 29, 2010 at 6:14 am

Rather than using IP, can internal users, use DNS ? If yes key your DNS servers to resolve the DNS to 192.168.0.xxx instead of the public IP.

Kumar March 29, 2010 at 6:14 am

I would, but in this case there’s nothing running name services on my inside net. Was hoping not to have to do that.

arul March 29, 2010 at 6:15 am

You could set the server to be your DMZ host witch makes the router allso spoof the address aswered by dns.
it would look something like this :
ip nat inside source static

Previous post:

Next post: