Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

ASA Conectivity Problem from Outside to DMZ several IP addresess, same MAC

I have one Server with one NIC, but configured with Three IP addresses. This Server is with NAT (0) in the ASA. The problemis that from Outside (Internet) I just can ping the first IP address y the others ones I can not ping. I see with "show arp" Three IP addresses and the same ARP, How can I resolve this problem I want to see my Three IP Addresses. I can see them from the LOCAL DMZ interface but not from outside. Please Help me.

1 ACCEPTED SOLUTION

Accepted Solutions

Re: ASA Conectivity Problem from Outside to DMZ several IP addre

make static nat for each IP

in this case you gonna allow two way connectivity

if you wanna usethe same IP address as it on the DMZ

for example the server ip addressess 192.168.1.1, 192.168.1.2, 192.168.1.3

static (DMZ,outside) 192.168.1.1 192.168.1.1 netmask 255.255.255.255

static (DMZ,outside) 192.168.1.2 192.168.1.2 netmask 255.255.255.255

static (DMZ,outside) 192.168.1.3 192.168.1.3 netmask 255.255.255.255

and make and ACL on your outside interface to allow the connection from outsideinterface to those IPs

also enable ICMP inspection and ICMP error inspection

on you default global_policy

for pinging

good luck

please Rate if helpful

3 REPLIES

Re: ASA Conectivity Problem from Outside to DMZ several IP addre

make static nat for each IP

in this case you gonna allow two way connectivity

if you wanna usethe same IP address as it on the DMZ

for example the server ip addressess 192.168.1.1, 192.168.1.2, 192.168.1.3

static (DMZ,outside) 192.168.1.1 192.168.1.1 netmask 255.255.255.255

static (DMZ,outside) 192.168.1.2 192.168.1.2 netmask 255.255.255.255

static (DMZ,outside) 192.168.1.3 192.168.1.3 netmask 255.255.255.255

and make and ACL on your outside interface to allow the connection from outsideinterface to those IPs

also enable ICMP inspection and ICMP error inspection

on you default global_policy

for pinging

good luck

please Rate if helpful

New Member

Re: ASA Conectivity Problem from Outside to DMZ several IP addre

Thanks a lot my friend.

That resolved my problem, I appreciate you time and you help.

Damian Mendoza.

Re: ASA Conectivity Problem from Outside to DMZ several IP addre

u r always welcome :)

132
Views
0
Helpful
3
Replies
CreatePlease to create content