lets say the DMZ network is 192.168.1.0/24
and the server IP is 192.168.1.2/24
do the following
static (DMZ, outside) 192.168.1.2 192.168.1.2 netmask 255.255.255.255
if u have a public ip address on the internat and u want users from internet to access that server on the dmz from the internet though that public ip do the following
lets say the public ip is 1.1.1.1
static (DMZ, outside) 1.1.1.1 192.168.1.2 netmask 255.255.255.255
now u need an ACL on to apply it on the outsid einterface to allow traffic going to DMZ server asuming that the DMZ security level is higher than the ouside
without public IP address
access-list 100 permit ip any host 192.168.1.2
with public IP
access-list 100 permit ip any host 1.1.1.1
no apply it on the outside interface
access-group 100 in interface outside
now let go to the traffic from inside to DMZ server
static (DMZ, inside) 192.168.1.2 192.168.1.2 netmask 255.255.255.255
now the traffic from inside to 192.168.1.2 server will work ok but if u want the server to start the communication with inside network u need ACL to be applied on the DMZ
interface assuming that insidesubnet mask is 255.255.255.0 as follow;
access-list 110 permit ip host 192.168.1.2 172.16.4.0 255.255.255.0
access-group 110 in interface DMZ
and every think wil work
if u need any more details just post here
good luck
please if helpful Rate
