I've come to the conclusion that Cisco should rename their âCisco ASA 5505 Getting Started Guideâ to âCisco ASA 550 A Guide To Spending A Lot Of Money And Receive Utter Frustration In Returnâ. Nothing in this manual is consistent. On one page they use one set of IP addresses and on another they use something totally different. I'm not sure what IP addresses to place where anymoreâ¦ I'm beginning to wonder about Cisco's ability to provide quality documentation. Anyway, I didn't mean to vent here but I am totally frustratedâ¦..
On with the problem at handâ¦â¦
I have 3 pc's. Two are on the inside network and one in the dmz which acts as a Web/E-Mail server. I use an ISP which provides a public internet address of let's say 220.127.116.11 via DHCP. I also have a base license for the ASA 5505 so I realize the dmz cannot initiate any contact with the inside vlan but the inside vlan can talk to the dmz vlan. Oh, also I'm using the ASDM interface.
Question 1: Does the dmz have to have a separate public ip address provided by the ISP?
Question 2: How do you do port forwarding on this thing? I'd like to forward the web and mail server ports to the dmz.
Any help with this would be greatly appreciatedâ¦..
Well at least we are making some progress :-)
You have this statement -
static (dmz,inside) 192.168.8.2 xx.yyy.121.101 netmask 255.255.255.255
When you try to access from inside - what IP address are you using as the destination IP address ?