Is it possible to access internal servers using public IP. The server and the client, Both are in inside DMZ.
The server has a static nat.The client uses global IP. ASA 5540 is been used
Yes you can.
Assuming you have the following:
Inside network: 192.168.1.0/24
DMZ network (where the server is): 192.168.5.0/24
Server IP: 192.168.5.5 --> NATed to 18.104.22.168
From the above, I assume you already have the following configured:
static (dmz,outside) 22.214.171.124 192.168.5.5 netmask 255.255.255.255
static (inside,dmz) 192.168.1.0 192.168.1.0 netmask 255.255.255.0
Assuming that you would like to access the public ip of the server 126.96.36.199 from the inside network, you need to add the following:
static (dmz,inside) 188.8.131.52 192.168.5.5 netmask 255.255.255.255
no sysopt noproxyarp inside
If you have ACL assigned to the inside interface, you would need to allow traffic towards the public ip.
If the above assumption is incorrect, and you have your server in the inside network instead (with ip of 192.168.1.5), and would like to access it from the inside via its public ip, here is the commands:
same-security-traffic permit intra-interface
static (inside,inside) 184.108.40.206 192.168.1.5 netmask 255.255.255.255
global (inside) 1 interface <-- assuming that you have "nat (inside) 1 0 0" statement.
If you have ACL assigned to the inside interface, you would need to allow traffic towards the public ip as well.
Hope that helps.