If I recall correctly access to/through
the external addresses of internal machines from internal machines is a
no-no.
Internally - all should be well; i.e. - machines are able to communicate
openly with each other
Internal 2 External systems - all should be well, and if you have static
address assignments they should be used appropriately.
External 2 Internal - all should be well; i.e. - systems outside the
firewall can access your internal systems fine
Internal 2 External address of Internal system - um, no.
Thanks!
TJ
-----Original Message-----
From: Greg Smythe [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 03, 2001 12:10
To: [EMAIL PROTECTED]
Subject: NAT question [7:3050]
Hello --
I have some static NAT translating going on in my lab, and if I am "inside"
and try to telnet to the "outside" IP address of a machine, I get connection
refused. Telnetting to the "inside" IP address of the machine works. I do
have
an inbound access list on the "outside" interface, but it is allowing telnet
to the machine. Upon doing a show access-list command I see that the line
for
telnet is not even getting hit. So why can't I telnet to an "ouside" IP from
the "inside"? Strange thing is that I can ping the "outside" IP ok, but any
other sort of connections to it fail.
Thanks!
Greg
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
*****************************************************************************
The information in this email is confidential and may be legally privileged.
It is intended solely for the addressee. Access to this email by anyone else
is unauthorized.
If you are not the intended recipient, any disclosure, copying, distribution
or any action taken or omitted to be taken in reliance on it, is prohibited
and may be unlawful. When addressed to our clients any opinions or advice
contained in this email are subject to the terms and conditions expressed in
the governing KPMG client engagement letter.
*****************************************************************************
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=3061&t=3050
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
