Brain Fart

patrick.hurley · ‎07-22-2008

Can I assign any ip address from the pool that I have been assigned to any host off any interface such as inside, DMZ1 and DMZ2 as long as I map them to a private subnet?

robertson.michael · ‎07-22-2008

Hi Patrick,

Let me make sure I understand your scenario:

You have a pool of public IP addresses assigned by your ISP. You want to map one of these addresses to a host behind your DMZ interface. Is this correct?

If so, you can simply configure a static translation, such as this:

static (dmz,outside) netmask 255.255.255.255

If the host behind the DMZ interface was, for example, a web server and you wanted users on the Internet to access it, you would also need to edit the ACL on your outside interface to allow the initial traffic to come in to your network.

Hope that helps.

-Mike

patrick.hurley · ‎07-22-2008

I guess because you are using the host address mask it doesn't matter where the host exists.