Recently, I have setup a few websites running on couple of servers (Linux & Windows). Here are the components in my network.
– Cisco 3620 Router (DHCP, NAT)
– Cisco 2950 Switch (VLAN1)
– Windows 2003 EE DC (Active Direcotry, DNS)
– Windows 2003 Web Server (IIS)
– CentOS 4.4 Web Server (Tomcat)
All machines are connected to the switch with default VLAN and use DHCP info from the router and DNS from Domain Controller.
There are 3 websites on IIS and 2 on Tomcat and I am using Host Headers for all of them.
I am able to browse all the websites from the Internet but I can’t browse any sites from within my network, not even on the servers that are hosting them.
I have static NAT configured on my Router that allows the mapping of public to private IP address for these websites. I also have PAT configured that allows client machines on the Nework to browse the internet.
I heared from someone that to view websites that use Private IP addresses you need to implement something called DNS Doctoring. I have searched a lot on this and came with nothing.
Hope someone out there can help me out. Here is snap-shot of my Cisco router running-config if you find something wrong with the NAT settings… Thanks in advance
—————— show running-config ——————
Building configuration…
Current configuration : 1841 bytes
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname RT-3620
!
enable secret 5
!
ip subnet-zero
!
!
ip name-server 4.4.4.4
ip name-server 5.5.5.5
ip name-server 6.6.6.6
ip dhcp excluded-address 192.168.2.23 192.168.2.254
!
ip dhcp pool Twenty
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 192.168.2.225
!
ip ssh time-out 120
ip ssh authentication-retries 3
!
call rsvp-sync
!
!
!
!
!
!
!
!
interface Ethernet0/0
ip address 3.3.3.10 255.255.255.0
ip nat outside
half-duplex
!
interface FastEthernet1/0
ip address 192.168.2.1 255.255.255.0
ip nat inside
duplex auto
speed auto
!
interface TokenRing1/0
no ip address
shutdown
ring-speed 16
!
ip nat inside source list 1 interface Ethernet0/0 overload
ip nat inside source static tcp 192.168.2.128 80 3.3.3.11 80 extendable
ip nat inside source static tcp 192.168.2.128 443 3.3.3.11 443 extendable
ip nat inside source static tcp 192.168.2.127 443 3.3.3.12 443 extendable
ip nat inside source static tcp 192.168.2.127 80 3.3.3.12 80 extendable
ip classless
ip route 0.0.0.0 0.0.0.0 3.3.3.1
no ip http server
ip pim bidir-enable
!
access-list 1 permit 192.168.2.0 0.0.0.255
!
dial-peer cor custom
!
!
!
!
!
end