Multiple IPs for server

huntlee · ‎07-28-2009

I have a customer where i have a DMZ host which has 2 IPs, one internal IP (10.184.19.10) and one NAT IP (199.229.216.10). However, the internal users needs to be able to access this DMZ host via both IPs. This DMZ host and all the internal users are connected via different interfaces on the same Cisco ASA 5520.

How can this be done??

The Cisco ASA Firewall is using 8.0(4).

Collin Clark · ‎07-28-2009

First you should disconnect the NIC that goes to the inside network on your DMZ server. This poses a large security issue because your by-passing your firewall. On the ASA you need to create ACE in your ACL to allow traffic to your DMZ server. You may need to configure NAT depending on your security interface levels.