Cisco ASA 8.2 DMZ

[sanalbabu]

Hi,

I would like ot create a DMZ zone in my ASA firewall . Need to publish three webservers in DMZ which need to access from internet and inside users.

I have 3 public IP for 3 webservers. Would like to do NAT as well.Please see the subnets which i have allocated for the zones.

Inside :  

192.168.1.0/24

Outside :

x,x.x.0

DMZ :

192.168.10.0 /24   

Internal IP of the dmz servers are 192.168.10.11  , 12 & 13

request your help to achieve this connectivity.

[Karsten Iwen]

First you need your static NAT-statements:

static (DMZ,outside) PUBLIC-IP1 192.168.10.11 netmask 255.255.255.255 
static (DMZ,outside) PUBLIC-IP2 192.168.10.12 netmask 255.255.255.255 
static (DMZ,outside) PUBLIC-IP3 192.168.10.13 netmask 255.255.255.255 

Next you have to allow the needed traffic with access-control (as an example with HTTP, SMTP and HTTPS on the three servers):

access-list OUTSIDE-IN extended permit tcp any host PUBLIC-IP1 eq 80
access-list OUTSIDE-IN extended permit tcp any host PUBLIC-IP2 eq 25
access-list OUTSIDE-IN extended permit tcp any host PUBLIC-IP3 eq 443
access-group OUTSIDE-IN in interface outside