Its outside interface ip address is 64.x.x.219.all the users behind the firewall are natted on the firewall with 64.x.x.220.
nat(inside) 1 0.0.0.0 0.0.0.0
global (outside) 1 64.x.x.220 netmask *****.
we have some servers on the DMZ interface of the firewall.
My question is :
if i have another real ip subnet (for example 84.x.x.132/28) can we use any ip from this subnet to publish any server on the firewall although its outside interface is configured with another ip from different subnet??????
Yes, if you present a DMZ server as an 84.x.x.x address to the outside then any traffic destined for the 84.x.x.x address must be routed to your site. It actually must be routed to the outside interface of your FWSM but you may have other devices under your control between the FWSM and the SP. So it's safer to say the SP must route 84.x.x.x back to your site.
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...