Cisco ASA - Static (inside,outside) using a an IP from the DMZ interface

srikantganesh · ‎06-11-2009

Just to paint a basic picture here is what we are trying to do.

**DMZ and Outside Public ranges as shown are completely different

** We are unable to move the inside host to DMZ

Example

Outside = 1.1.1.x/30 (Public Range)

DMZ - (2.2.2.x/27 (Public range)

Inside - 10.0.0.0/24

Obviously from this if we have to a static nat for an inside host the outside interface is a /30 and an IP is available for one to one use.

The Second public range is configured on the the DMZ interface /27.

Q. Can we use one of the available IP's on the dmz and do a

Static(inside,outside) 2.2.2.2 10.0.0.2 netmask 255.255.255.255

wdrootz · ‎06-17-2009

Static command can be used to Nat an DMZ zone ip address to an outside ip address.You will not be able to use an ip address of dmz zone in Inside network