Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

Traffic between ASA interfaces

Hi,

I have the following scenario:

Outside

|

ASA--DMZ (valid IP range/28)

|

Inside (10.0.0.0/20)

I need to set up the ASA so that traffic originating from a DMZ host, with destination being the ASA's outside IP address and port 25/tcp, will be redirected to a server on inside LAN. The problem is that I need to do this WITHOUT using NAT on the DMZ interface to map inside hosts.

NAT rules mapping the inside host to outside interface are working fine if traffic originages from the outside, but if it's from the DMZ just won't work.

Commands "inter-interface" and "intra-interface" are enabled but won't help it since security levels aren't the same.

Any tips?

Regards,

Guilherme

1 REPLY

Re: Traffic between ASA interfaces

I think you can use static nat like below.

static (inside,DMZ) tcp 25 25

You need add ACL to permit the traffic as well since it is from DMZ to inside.

281
Views
0
Helpful
1
Replies
CreatePlease to create content