This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNAT Access

Hi Fellas,

Good Day!

I have server that need to be publish outside of my network. So by means of DNAT I was able do it.

Ex: Public Add is 203.X.X.100 of my WEB Server (mywebserver.com)
Private Add is 192.168.100.254.

So far everything goes fine, now my problem is I cant access my server internally using mywebserver.com instead I can access it via its local ip.
When I tried to ping its show I am pinging the Public address not the local one.
Under Static Entried created 192.168.100.254 pointed mywebserver.com but still no effect.

Do I miss something? or how do I achieve this kind of setup?

Thank you

This thread was automatically locked due to age.

0 Scott_Klassen over 13 years ago

Do your clients use the Astaro for DNS? If so, create a static entry for mywebserver.com > 192.168.100.254
Cancel
Vote Up 0 Vote Down

Cancel
0 asgnewbie over 13 years ago

hi scott, appreciate your effort.

Basically I have vlans, my asg internal ip is 192.168.0.X, and my server is behind vlan 192.168.100.X.
Yes,my clients uses astaro internal ip as their primary dns
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 13 years ago

As Scott says,
In Astaro, create a static DNS entry for mywebserver.com > 192.168.100.254

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 asgnewbie over 13 years ago

Hi BarryG thank you, as you can see in my first post I created that already
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 13 years ago

The DNS entry suggested by Barry and Scott should have done it - is there anythhing being blocked in the Firewall or Intrusion Prevention log? Then again, maybe you need a Full NAT: Accessing Internal or DMZ Webserver from Internal network.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 asgnewbie over 13 years ago

hi balfson, thank you.

I saw the link you gave, means do I need to delete my original DNAT rule then create new DNAT rule based on the link you shared?

Pls correct me if I'm wrong. thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 13 years ago

The link is to create a Full NAT type rule. Take a look at the settings in the article. It will handle internal traffic to your web server only. You will still need your DNAT if you want external clients to reach your web server.
Cancel
Vote Up 0 Vote Down

Cancel
0 asgnewbie over 13 years ago in reply to Scott_Klassen

Clarification only for External Address

Name: Webserver Full NAT for internal redirect
Traffic Source: Internal(network)
Traffic Service: HTTP
Traffic Destination: External(Address)----External Add of my ASG or External Add which pointed to my web server?
NAT mode: Full NAT
Destination: Internal Server address
Destination: Service: leave blank
Source: ASG Internal(address)
Source Service: Leave blank
Automatic packet filter rule: Check
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 13 years ago

The External (Address) network definition object for the ASG. The icon will look like a little green NIC.
Cancel
Vote Up 0 Vote Down

Cancel