Need some assistance here?
1.Need email access from outside but don't have a dedicated public IP for mail server. Can i share the same IP for both like the way ISA works? i.e PAT inside to outside then static NAT for exchange IP to public IP & allow smtp access from outside?
2. Need to inside to access DMZ without translation. I have done this:
ip address 172.31.1.2 255.255.255.0 standby 172.31.1.3
ip address 192.168.168.1 255.255.255.248 standby 192.168.168.2
static (IF_LAN_INSIDE,IF_DMZ) 172.31.1.0 172.31.1.0 netmask 255.255.255.0
but i cant access DMZ from INSIDE
removed the static command and did this:
access-list INSIDE_TO_DMZ_NONAT extended permit ip 172.31.1.0 255.255.255.0 192.168.168.0 255.255.255.248
nat (IF_LAN_INSIDE) 0 access-list INSIDE_TO_DMZ_NONAT
this didn't work still. enable nat-control to no avail.
the only thing that works is nating from inside to DMZ.