PIX - ACL's and NAT

[daniel.bowen]

Hi All,

I have posted a couple of times on this already, but still cant quite get my head around it as I seem to be getting conflicting information.

All I am looking to do is to allow communications bi-directionally between 2 DMZ servers and 1 Inside server for TCP and UDP. Please check out the attched diagram to see the set up.

I am not sure if I need to use global commands, static mappings or ACL's (or a combination of all). Any help would be great.

Many thanks,

Dan

[steven.wright]

Hi Dan,

Hope this helps,

I would do the following...

access-list nonat permit ip host host

access-list permit tcp host host

Please let me know if this helps!

Thanks

Steve