NAT port mapping problem..

Hi,

I used NAT in a machine on 2K3 platform to build an
internal network and allow the network connect to the
Internet.

My problem is, when I want to do port mapping
using "Routing and Remote Access", say 208.56.125.32 port
1234 (external network) is mapped to 192.168.0.2 port 80
(internal network). Then I am going to access
http://208.56.125.32:1234/ form another machine in the
internal network, but it failed. Please advise for any
possible problems. Thanks!

Regards,
CWT

Static NAT/PAT is only provided from the external nic to the internal nic.
When the client originates from the side of the internal nic then it must
use 192.168.0.2 - 80 as the target. NAT doesn't make "u-turns".


--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

"CWT" <(E-Mail Removed)> wrote in message
news:8e4a01c47879$420ef930$(E-Mail Removed)...
> Hi,
>
> I used NAT in a machine on 2K3 platform to build an
> internal network and allow the network connect to the
> Internet.
>
> My problem is, when I want to do port mapping
> using "Routing and Remote Access", say 208.56.125.32 port
> 1234 (external network) is mapped to 192.168.0.2 port 80
> (internal network). Then I am going to access
> http://208.56.125.32:1234/ form another machine in the
> internal network, but it failed. Please advise for any
> possible problems. Thanks!
>
> Regards,
> CWT

Thank you very much for your reply.

Since the server temporarily disconnected from the
network, I am not able to test it with computers in
external network. But for the Computer configured as the
NAT server, it still cannot connect localhost:1234. I
think it is not an u turn, but why it still not work?

BTW, I need to have u turn in my network, is there any
good solution? Would you please recommand some other good
NAT server, if there is any. Thank you very much.


>-----Original Message-----
>Static NAT/PAT is only provided from the external nic to
the internal nic.
>When the client originates from the side of the internal
nic then it must
>use 192.168.0.2 - 80 as the target. NAT doesn't make "u-
turns".
>
>
>--
>
>Phillip Windell [MCP, MVP, CCNA]
>www.wandtv.com
>
>"CWT" <(E-Mail Removed)> wrote in
message
>news:8e4a01c47879$420ef930$(E-Mail Removed)...
>> Hi,
>>
>> I used NAT in a machine on 2K3 platform to build an
>> internal network and allow the network connect to the
>> Internet.
>>
>> My problem is, when I want to do port mapping
>> using "Routing and Remote Access", say 208.56.125.32
port
>> 1234 (external network) is mapped to 192.168.0.2 port
80
>> (internal network). Then I am going to access
>> http://208.56.125.32:1234/ form another machine in the
>> internal network, but it failed. Please advise for any
>> possible problems. Thanks!
>>
>> Regards,
>> CWT
>
>
>.
>

"CWT" <(E-Mail Removed)> wrote in message
news:95bb01c478a6$e4686e50$(E-Mail Removed)...

> BTW, I need to have u turn in my network, is there any
> good solution? Would you please recommand some other good
> NAT server, if there is any. Thank you very much.

No, there isn't. It is the way the technology works. When you access
internal resources from the inside you go directly to the target machine.
I cna't think of any situation where you have to do a "u-turn" like that. I
think you may incorrectly believe that you have to do it a certain way when
there are other better ways that work.

--

Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

I hope that the internal machines work like a machine in
external network. So, the internal machines should access
the resources of the internal network by u turn. But I got
your point, it is impossible.
Thank you very much for your answer.


>-----Original Message-----
>"CWT" <(E-Mail Removed)> wrote in
message
>news:95bb01c478a6$e4686e50$(E-Mail Removed)...
>
>> BTW, I need to have u turn in my network, is there any
>> good solution? Would you please recommand some other
good
>> NAT server, if there is any. Thank you very much.
>
>No, there isn't. It is the way the technology works.
When you access
>internal resources from the inside you go directly to the
target machine.
>I cna't think of any situation where you have to do a "u-
turn" like that. I
>think you may incorrectly believe that you have to do it
a certain way when
>there are other better ways that work.
>
>--
>
>Phillip Windell [MCP, MVP, CCNA]
>www.wandtv.com
>
>
>.
>