I'm trying to get a few of our machines on dmz to communicate with a TSM server which is located on a subnet on the inside. But I can't get it to route traffic out on the subinterface I have created in the pix, it keeps using the dmz as output interface, instead of the subinterface.
Server on dmz: 192.168.50.5
Subinterface on inside interface: 192.168.120.250 (name: BackupLAN)
TSM server: 22.214.171.124 (name: TSMserver)
The following NATs are used:
static (BackupLAN,dmz) TSMserver TSMserver netmask 255.255.255.255
static (dmz,BackupLAN) 192.168.50.5 192.168.50.5 netmask 255.255.255.255
The following route is created:
route BackupLAN TSMserver 255.255.255.255 192.168.120.1 1 (192.168.120.1 is a switch which passes the traffic on to the TSM server)
There is also a security policy for incoming on dmz which only allows traffic with destination port 1500 to be passed on.
When running the Packet tracer in ASDM, the result is that the packet is allowed, but both input and output interface is dmz, output interface should be BackupLAN.
Is there something I have forgot to configure? Or is anything wrong configured?