nat rules

[tolinrome tolinrome]

I have enabled access rules for certain hosts to permit icmp from the dmz to access the inside interface but it still wont work.

I was thinking no nat rules would be necessary, but are they? The security of the inside interface is a higher number than the dmz.

If I do need to create a nat rule what would it be? Version 9.x asa. Thanks.

I have enabled access rules for certain hosts to permit icmp from the dmz to access the inside interface but it still wont work.

I was thinking no nat rules would be necessary, but are they? The security of the inside interface is a higher number than the dmz.

If I do need to create a nat rule what would it be? Version 9.x asa. Thanks.

[Julio Carvajal]

Hello,

You need :

1. ACL on the DMZ interface allowing the traffic
2. ICMP inspection (Fixup protocol ICMP)

As you said no nat needed

Looking for some Networking Assistance? 
Contact me directly at jcarvaja@laguiadelnetworking.com

I will fix your problem ASAP.

Cheers,

Julio Carvajal Segura
http://laguiadelnetworking.com

[tolinrome tolinrome]

What if those hosts on the dmz are being nated from the outside, still no nat needed?

outside>>dmz>>inside

[Julio Carvajal · Accepted solution]

Hello,

If you nat the DMZ to Outside there is no requirement to Nat the DMZ o the Inside.

The question would be:

Would u like to access the DMZ hosts by using their Public IP address or the private one?

Looking for some Networking Assistance? 
Contact me directly at jcarvaja@laguiadelnetworking.com

I will fix your problem ASAP.

Cheers,

Julio Carvajal Segura
http://laguiadelnetworking.com