Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

DMZ network to internal network

I have read several posts on this and I still don't quite understand what needs to happen. I have a web server in the dmz (10.10.30.10) that needs to access a SQL server on the internal network (192.160.0.7). How do I allow this access. I currently can access the DMZ from any computer on the internal network. I have attached a sanitized copy of my config so you can see what I am doing.

2 REPLIES

Re: DMZ network to internal network

static (inside,DMZ) 10.10.30.49 192.168.0.7 netmask 255.255.255.255

access-list DMZ_access_in extended permit ip host 10.10.30.10 host 192.160.0.7

access-group DMZ_access_in in interface DMZ

In addition make sure the firewall has a route to 192.160.0.7 via the Inside interface. I have assumed you aren't using this address 10.10.30.49 on the DMZ if you are then substitute that address in the static and ACL.

HTH

Sundar

Re: DMZ network to internal network

oops there was a typo in the IP in my last post. Here's the correct syntax.

static (inside,DMZ) 10.10.30.49 192.160.0.7 netmask 255.255.255.255

121
Views
0
Helpful
2
Replies
CreatePlease to create content