Placing a host with a specific IP on the DMZ...

m-reza · ‎12-04-2001

I am running a PIX with inside outside and a DMZ.

For a specific application, I need to place a host on the DMZ. The IP address of this host cannot be change and is not from the DMZ global pool.

What is the best way to take care of this?. I tried using a /32 route for the host on the DMZ using the route statement but PIX (using 6.01) doesnt accept it.

Will proxy arp work?. What is the best way around this??

brford · ‎12-05-2001

Hmm. Gets back to why?

You'll need to look at the alias command on the PIX.

You say that the host needs a fixed IP. OK. But is that an otherwise inside or outside address? If it's outside (and you need it because it appears in some external DNS) you can have the PIX take requests for that IP and forward them to the host on the DMZ. The host will have a DMZ address but the PIX will translate between the outside and local IP address.

Liberty for All,

Brian

Brian Ford | brford@cisco.com | brford@yahoo.com | 51 75 61 6c 69 74 79 20 6d 65 61 6e 73 20 64 6f 69 6e 67 20 69 74 20 72 69 67 68 74 20 77 68 65 6e 20 6e 6f 20 6f 6e 65 20 69 73 20 6c 6f 6f 6b 69 6e 67 2e | Email me when you figure this out.