dmz on cisco asa5510

donnie · ‎10-17-2009

Hi all. I have configured internal/dmz/external interfaces on my asa5510. I am given a range of public ip by my isp. Eg would be an isp gave me a range of 203.112.224.0/24. Can i apply 203.112.224.240/28 to my dmz? Can access to this subnet be protected by firewall policies? Thks in advance.

Jon Marshall · ‎10-17-2009

Yes you can do this. As long as it is a part of the larger subnet allocated to you by your ISP then you can split it up however you want.

Jon

donnie · ‎10-18-2009

Hi Jon,

Sorry for late reply. Hence can my internal devices access dmz at the public ip address range 203.112.224.240/28? Thks in advance.