cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
447
Views
0
Helpful
3
Replies

ASA Conectivity Problem from Outside to DMZ several IP addresess, same MAC

dmendoza
Level 1
Level 1

I have one Server with one NIC, but configured with Three IP addresses. This Server is with NAT (0) in the ASA. The problemis that from Outside (Internet) I just can ping the first IP address y the others ones I can not ping. I see with "show arp" Three IP addresses and the same ARP, How can I resolve this problem I want to see my Three IP Addresses. I can see them from the LOCAL DMZ interface but not from outside. Please Help me.

1 Accepted Solution

Accepted Solutions

Marwan ALshawi
VIP Alumni
VIP Alumni

make static nat for each IP

in this case you gonna allow two way connectivity

if you wanna usethe same IP address as it on the DMZ

for example the server ip addressess 192.168.1.1, 192.168.1.2, 192.168.1.3

static (DMZ,outside) 192.168.1.1 192.168.1.1 netmask 255.255.255.255

static (DMZ,outside) 192.168.1.2 192.168.1.2 netmask 255.255.255.255

static (DMZ,outside) 192.168.1.3 192.168.1.3 netmask 255.255.255.255

and make and ACL on your outside interface to allow the connection from outsideinterface to those IPs

also enable ICMP inspection and ICMP error inspection

on you default global_policy

for pinging

good luck

please Rate if helpful

View solution in original post

3 Replies 3

Marwan ALshawi
VIP Alumni
VIP Alumni

make static nat for each IP

in this case you gonna allow two way connectivity

if you wanna usethe same IP address as it on the DMZ

for example the server ip addressess 192.168.1.1, 192.168.1.2, 192.168.1.3

static (DMZ,outside) 192.168.1.1 192.168.1.1 netmask 255.255.255.255

static (DMZ,outside) 192.168.1.2 192.168.1.2 netmask 255.255.255.255

static (DMZ,outside) 192.168.1.3 192.168.1.3 netmask 255.255.255.255

and make and ACL on your outside interface to allow the connection from outsideinterface to those IPs

also enable ICMP inspection and ICMP error inspection

on you default global_policy

for pinging

good luck

please Rate if helpful

Thanks a lot my friend.

That resolved my problem, I appreciate you time and you help.

Damian Mendoza.

u r always welcome :)

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: