Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

Cisco ASA 8.2 DMZ

Hi,

 

I would like ot create a DMZ zone in my ASA firewall . Need to publish three webservers in DMZ which need to access from internet and inside users.

 

I have 3 public IP for 3 webservers. Would like to do NAT as well.Please see the subnets which i have allocated for the zones.

 

Inside :  

192.168.1.0/24

Outside :

x,x.x.0

DMZ :

192.168.10.0 /24   

 

Internal IP of the dmz servers are 192.168.10.11  , 12 & 13

 

request your help to achieve this connectivity.

 

1 REPLY
VIP Purple

First you need your static

First you need your static NAT-statements:

static (DMZ,outside) PUBLIC-IP1 192.168.10.11 netmask 255.255.255.255 
static (DMZ,outside) PUBLIC-IP2 192.168.10.12 netmask 255.255.255.255 
static (DMZ,outside) PUBLIC-IP3 192.168.10.13 netmask 255.255.255.255 

Next you have to allow the needed traffic with access-control (as an example with HTTP, SMTP and HTTPS on the three servers):

access-list OUTSIDE-IN extended permit tcp any host PUBLIC-IP1 eq 80
access-list OUTSIDE-IN extended permit tcp any host PUBLIC-IP2 eq 25
access-list OUTSIDE-IN extended permit tcp any host PUBLIC-IP3 eq 443
access-group OUTSIDE-IN in interface outside

 

 

 

 

57
Views
0
Helpful
1
Replies
CreatePlease to create content