cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
509
Views
0
Helpful
6
Replies

routing without a Gateway

ehuarte
Level 1
Level 1

Hi:

I have diferents VLANS interconnected trough a 6506 and an ASA5520 (for the DMZ).

In a DMZ VLAN port of a 3560 I have a machine that hasn't got Gateway. The IP default-gateway is for the rest VLAN's in the inside.

What can I do to connect this machine with http from the inside?

Can you help me?

Thanks. Regards.

6 Replies 6

jasonbiel
Level 1
Level 1

A system in the DMZ vlan should be using the DMZ interface ip of the ASA for its gateway.

Yes, it's true.

But the thing is that this equipment; an air conditioning equipment with a network interface, I can't configure a gateway.

I only can configure an IP, Mask, and that's all.

So if I want to access through HTTP from the "inside", how I route the answer ? (without a gateway)

Thanks. Regards.

If you want to access this device via HTTP across the inside interface of the ASA, you need to make sure there no are ACLs limiting traffic to / from your inside interface to the DMZ and vice versa.

Two suggestions. Set the mask wide and enable proxy arp on the local routing interface.

Alternatively, configure NAT such that any connections coming in for this device appear to be on the local subnet.

Neither of these are great, but they may just give you connectivity.

Danilo Dy
VIP Alumni
VIP Alumni

Edit: Paul already mentioned NAT :)

No problem - more people suggesting the same thing adds weight

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card