How do I confiure my router such that my accessing my public ip internally translates to the correct private IP.

Question

Hi guys,
I have a problem with my web application. I cannot access it from my internal network using my static public IP (i.e 49.123.456.7). However I can access it from an external network using my static public IP. Is there a way for me to allow access internally as well as externally?
I am using Cisco 800 series router. Here is my configuration:
Header 1
Current configuration : 2549 bytes
! Last configuration change at 09:35:38 SGT Thu Oct 18 2012 by xxxxx
! NVRAM config last updated at 16:56:45 SGT Wed Oct 17 2012 by xxxxx
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname Router01
boot-start-marker
boot-end-marker
no aaa new-model
memory-size iomem 10
clock timezone XXX X
ip source-route
ip dhcp excluded-address 192.168.1.1 192.168.1.99
ip dhcp excluded-address 192.168.1.222
ip dhcp pool NetworkPool
   import all
   network 192.168.1.0 255.255.255.0
   dns-server XXX.XXX.XXX.66 XXX.XXX.XXX.66
   default-router 192.168.1.1
ip cef
no ip domain lookup
ip domain name nacache1.m1net.com.sg
ip name-server XXX.XXX.XXX.66
ip name-server XXX.XXX.XXX.66
login block-for 30 attempts 5 within 10
login delay 3
login quiet-mode access-class 23
no ipv6 cef
license udi pid CISCOXXX-XXX sn XXXXXXXXXXX
username admin privilege 15 secret X ************************.jgis1
policy-map NGNBN
class class-default
  set cos 1
interface FastEthernet0
interface FastEthernet1
interface FastEthernet2
interface FastEthernet3
interface FastEthernet4
no ip address
duplex auto
speed auto
interface FastEthernet4.1103
description WAN_Link_100MbpsFibreBiz
encapsulation dot1Q 1103
ip address dhcp
ip nat outside
ip virtual-reassembly
no cdp enable
service-policy output NGNBN
interface Vlan1
description LocalLAN
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
ip forward-protocol nd
no ip http server
no ip http secure-server
ip nat inside source list NAT_Addresses interface FastEthernet4.1103 overload
ip nat inside source static tcp 192.168.1.198 80 49.123.456.7 80 extendable
ip nat inside source static tcp 192.168.1.198 443 49.123.456.7 443 extendable
ip nat inside source static tcp 192.168.1.198 8090 49.123.456.7 8090 extendable
ip access-list extended NAT_Addresses
permit ip 192.168.1.0 0.0.0.255 any
access-list 23 remark ** Managment_Segment **
access-list 23 permit XXX.XXX.0.0 0.0.0.255
access-list 23 permit XXX.XXX.XXX.0 0.0.0.255
access-list 23 permit XXX.XXX.XXX.0 0.0.0.255
access-list 23 permit XXX.XXX.XXX.0 0.0.0.255
access-list 23 permit 192.168.1.0 0.0.0.255
control-plane
line con 0
privilege level 15
login local
no modem enable
line aux 0
line vty 0 4
access-class 23 in
privilege level 15
login local
scheduler max-task-time 5000
ntp server XX.XXX.XXX.1 prefer
ntp server XXX.XXX.XXX.81
end
Any help and suggestions will be appreciated
Regards,
Adeeb

Answer 1

Hi Francesco,
Thanks for your reply, but your solution cannot solve my problem.
Here is many router show run again:
User Access Verification
Username: xxxxxx
Password:
RP_Router01#show run
Building configuration...
Current configuration : 2520 bytes
! Last configuration change at 12:29:38 SGT Fri Oct 19 2012 by xxxxxx
! NVRAM config last updated at 12:34:16 SGT Fri Oct 19 2012 by xxxxxx
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname RP_Router01
boot-start-marker
boot-end-marker
no aaa new-model
memory-size iomem 10
clock timezone XXX X
ip source-route
ip dhcp excluded-address 192.168.1.1 192.168.1.99
ip dhcp excluded-address 192.168.1.222
ip dhcp pool NetworkPool
   import all
   network 192.168.1.0 255.255.255.0
   dns-server XXX.XXX.XXX.66 XXX.XXX.XXX.66
   default-router 192.168.1.1
ip cef
no ip domain lookup
ip domain name XXXXX.XXXXX.com.XX
ip name-server XXX.XXX.XXX.66
ip name-server XXX.XXX.XXX.66
login block-for 30 attempts 5 within 10
login delay 3
login quiet-mode access-class 23
no ipv6 cef
license udi pid CISCOXXX-XXX sn XXXXXXXXXXX
username admin privilege 15 secret X ************************.jgis1
policy-map NGNBN
class class-default
  set cos 1
interface FastEthernet0
interface FastEthernet1
interface FastEthernet2
interface FastEthernet3
interface FastEthernet4
no ip address
duplex auto
speed auto
interface FastEthernet4.1103
description WAN_Link_100MbpsFibreBiz
encapsulation dot1Q 1103
ip address dhcp
ip nat enable
ip virtual-reassembly
no cdp enable
service-policy output NGNBN
interface Vlan1
description LocalLAN
ip address 192.168.1.1 255.255.255.0
ip nat enable
ip virtual-reassembly
ip forward-protocol nd
no ip http server
no ip http secure-server
ip nat source list NAT_Addresses interface FastEthernet4.1103 overload
ip nat source static tcp 192.168.1.198 80 49.123.456.7 80 extendable
ip nat source static tcp 192.168.1.198 443 49.123.456.7 443 extendable
ip nat source static tcp 192.168.1.198 8090 49.123.456.7 8090 extendable
ip access-list extended NAT_Addresses
permit ip 192.168.1.0 0.0.0.255 any
access-list 23 remark ** Managment_Segment **
access-list 23 permit XXX.XXX.0.0 0.0.0.255
access-list 23 permit XXX.XXX.XXX.0 0.0.0.255
access-list 23 permit XXX.XXX.XXX.0 0.0.0.255
access-list 23 permit XXX.XXX.XXX.0 0.0.0.255
access-list 23 permit 192.168.1.0 0.0.0.255
control-plane
line con 0
privilege level 15
login local
no modem enable
line aux 0
line vty 0 4
access-class 23 in
privilege level 15
login local
scheduler max-task-time 5000
ntp server XXX.XXX.XXX.1 prefer
ntp server XXX.XXX.XXX.81
end
I was following exactly your command but no idea why still cannot access my public static IP 49.123.456.7 from local network.
Regards,
Adeeb