Need to provide connection from Outside to the Web Server in the DMZ

[Jacob Samuel]

Hi Friends,

I need a kind help. I have to publish a Portal Server to the Internet. The portal is in a DMZ Zone of ASA 5540, Outside connecting to the Internet.

I have to access the same server from Inside network, and from some other DMZ Zones of the same ASA as well.

Kindly need your help, what else i should add on the Firewall to make this possible. As of now there is no NAT statement, only NAT 0.

Also, I need to provide internet connection to all LAN Users.

Thanks a lot

Regards

Jacob

[vishwancc]

Hi ,

The way to do it is do static natting

static (dmz,outside) X.X.x.x 192.168.2.102 netmask 255.255.255.255 where X is public ip for the server .

create a object group and match services to that if you need people want to access.

Chao

Vishwa

[Jacob Samuel]

Thanks Vishwa,

So Static NAT, Access list, Route these are the things we need for this or any thing else more?

I need to know about the order of the NAT-ing. And how the access list would be ?

regards

Jacob