[nsp] NAT question

Brian Turnbow b.turnbow at twt.it
Tue Feb 3 02:57:40 EST 2004

you can create a loopback address with ip nat outside and policy route
twords that interface, in this way nat goes through an "inside and outside"
interface and will work.
there is a document on the cisco website that explaions the configuration
thay call it "nat on a stick"


-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net]On Behalf Of Jay Nakamura
Sent: lunedì 2 febbraio 2004 21.53
To: Cisco List
Subject: [nsp] NAT question

I have a quick question on NAT that I haven't found the answer to.

Let's say I have the following configuration,

interface FastEthernet0/1
 ip address
 ip nat inside
interface FastEthernet0/2
 ip address
 ip nat outside
ip nat inside source list 101 interface FastEthernet0/2 overload
ip nat inside source static tcp 80 80 extendable
access-list 101 permit ip any
ip route

Let's say is a web server, has the DNS www.foobar.com

Now, the issue is, the users inside would like to connect to the web server
at but use www.foobar.com as the address.

Well, that doesn't work from inside the network since www.foobar.com will
resolve to, and NAT gets confused when it hits the router.  (At
least my test bed router does, running 12.2(17a))

Is there a way to configure NAT so you can get to from the inside



cisco-nsp mailing list  cisco-nsp at puck.nether.net
archive at http://puck.nether.net/pipermail/cisco-nsp/

More information about the cisco-nsp mailing list