NAT with official IP on DMZ

Unanswered Question
May 1st, 2007


I have a PIX 515E (Ver.6.3.1)with three interfaces. Now I d'like to activate the DMZ interface with a official IP-address range.

Between the internel and outside interface is a NAT (PAT) configuration active. No, I have problems to configure the NAT for the DMZ interface. With the official IP-adresses on the DMZ, it is not necessary to make NAT. I d'like to configure a simple routing between the internal to DMZ and between the ouside to DMZ.

How I is the NAT configuration for the a DMZ with official IP-adresse?



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Jon Marshall Tue, 05/01/2007 - 03:10

Hi Pascal

As an example lets say your DMZ addressing is

on your pix firewall

static (DMZ,outside) netmask

As long as the ISP routes these addresses to your pix external interface you should have no problem.




This Discussion