DMZ on 2811 conf guide request

Unanswered Question
May 27th, 2009


I need to reconfigure DMZ (several external servers) on ISR2811.

I kindly request for design scenarios, configuration guides for DMZ (best with ISA server in LAN) on or other.

thanks in advance.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
htarra Tue, 06/02/2009 - 18:03

Here is a configuration for a DMZ ,,,


interface GigabitEthernet0/1

nameif DMZ

security-level 50

ip address x.x.x.x 255.255.255.y


access-list dmz_access_in extended permit icmp any any


access-list DMZ_nat0_outbound extended permit ip x.x.x.0 255.255.255.y any


access-list DMZ_access_in extended permit tcp any any eq domain

access-list DMZ_access_in extended permit tcp any any eq hostname


mtu DMZ 1500


access-group DMZ_access_in in interface DMZ

grzegorz.niecka Fri, 06/05/2009 - 02:54

thanks for You request but I need a concept scenario, how propertly design DMZ.

configuration exapmles are secondary matters.


This Discussion