Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Brain Fart

Can I assign any ip address from the pool that I have been assigned to any host off any interface such as inside, DMZ1 and DMZ2 as long as I map them to a private subnet?


Re: Brain Fart

Hi Patrick,

Let me make sure I understand your scenario:

You have a pool of public IP addresses assigned by your ISP. You want to map one of these addresses to a host behind your DMZ interface. Is this correct?

If so, you can simply configure a static translation, such as this:

static (dmz,outside) netmask

If the host behind the DMZ interface was, for example, a web server and you wanted users on the Internet to access it, you would also need to edit the ACL on your outside interface to allow the initial traffic to come in to your network.

Hope that helps.


New Member

Re: Brain Fart

I guess because you are using the host address mask it doesn't matter where the host exists.