Weird issue. 3011 passes static external and internal ips just fine using two ports plugged into the same switch. But a CCR I can't get it to do it. I thought the CCR was bad. Bought a new one (ccr 1009). It won't do it either. Any ideas?

Too few information on what you are trying to do in particular and what is the CCR configuration which fails to do that. Draw a simple sketch with the addresses and netmasks and export the configuration following the hint in my automatic signature.