Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Cisco ASA - Static (inside,outside) using a an IP from the DMZ interface

Just to paint a basic picture here is what we are trying to do.

**DMZ and Outside Public ranges as shown are completely different

** We are unable to move the inside host to DMZ

Example

Outside = 1.1.1.x/30 (Public Range)

DMZ - (2.2.2.x/27 (Public range)

Inside - 10.0.0.0/24

Obviously from this if we have to a static nat for an inside host the outside interface is a /30 and an IP is available for one to one use.

The Second public range is configured on the the DMZ interface /27.

Q. Can we use one of the available IP's on the dmz and do a

Static(inside,outside) 2.2.2.2 10.0.0.2 netmask 255.255.255.255

1 REPLY
Bronze

Re: Cisco ASA - Static (inside,outside) using a an IP from the D

Static command can be used to Nat an DMZ zone ip address to an outside ip address.You will not be able to use an ip address of dmz zone in Inside network

380
Views
0
Helpful
1
Replies