Intranet service testing via mapped public network IP access: ASA8.0 hairpin NAT Test

A. Test topology:

Reference Link: http://blog.csdn.net/boblxs/article/details/8063814

Two. Basic ideas:

A. Through the configuration of hairpin NAT so that the intranet through the mapped public network address to access the internal server at the same time to do the target address translation, also do the source address translation

---the internal server that is visited is the ASA internal interface address, not the intranet actual address

B. Because the flow is only in and out of the ASA's internal interface, you need to open the same security level in and out of the same interface

Three. Basic configuration:

A.R1:

Interface fastethernet0/0

IP address 202.100.1.2 255.255.255.0

No shut

b.asa8.0:

Interface ethernet0/0

Nameif inside

IP address 10.1.1.254 255.255.255.0

No shut

Interface ETHERNET0/1

Nameif outside

IP address 202.100.1.1 255.255.255.0

No shut

Route outside 0.0.0.0 0.0.0.0 202.100.1.2

C.R2:

Interface fastethernet0/0

IP address 10.1.1.2 255.255.255.0

No shut

IP Route 0.0.0.0 0.0.0.0 10.1.1.254

Enable Secret Cisco

Line vty 0 4

Password Cisco

Login

-----R1 to open Telnet service