NAT with official IP on DMZ

Unanswered Question
May 1st, 2007

Hello

I have a PIX 515E (Ver.6.3.1)with three interfaces. Now I d'like to activate the DMZ interface with a official IP-address range.

Between the internel and outside interface is a NAT (PAT) configuration active. No, I have problems to configure the NAT for the DMZ interface. With the official IP-adresses on the DMZ, it is not necessary to make NAT. I d'like to configure a simple routing between the internal to DMZ and between the ouside to DMZ.

How I is the NAT configuration for the a DMZ with official IP-adresse?

Regards

Pascal

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Loading.
Jon Marshall Tue, 05/01/2007 - 03:10

Hi Pascal

As an example lets say your DMZ addressing is

212.73.45.0/28

on your pix firewall

static (DMZ,outside) 212.73.45.0 212.73.45.0 netmask 255.255.255.240

As long as the ISP routes these addresses to your pix external interface you should have no problem.

HTH

Jon

Actions

This Discussion