Re-IP DMZ to private space, NAT to public

Unanswered Question
Mar 18th, 2010

Greetings,

After the initial information gathering, I find I am at a standstill as-to how I should procede.

We are currently in the process of implementing One-to-One static NAT'ing on our DMZ servers, and RE-IP'ing them to private IP space.

We need to enable DNS resolution, LDAP authentication between the DMZ servers and our network, while making them accessible tobi the public.

I'm hoping for a bit of hand-holding on this issue, since I am not sure where to begin.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
dan_track Thu, 03/18/2010 - 07:39

On which platform are you going to do this? Can you post current configuration?

Dan

vilaxmi Fri, 03/19/2010 - 19:46

Hello,

Static translation for DMZ server :

static (dmz,outside) netmask 255.255.255.255

access-list inbound extended permit tcp any host

access-group inbound in interface outside // to permit the inbound TCP connections from any outside IP address to the public IP address of server//

Now, coming to your DNS resolution, I would need to know, where is you DNS server located ? For the external clients, external DNS server would take care of name resoultion.

Thank

Vijaya

Actions

This Discussion