Hi,
You must NAT from inside to DMZ or do static identity NAT for inside to DMZ.
Which version of OS is running on the ASA ?
if version <8.3 then you can do static identity NAT like this:
nat(inside,DMZ) 192.168.3.0 192.168.3.0 netmask 255.255.255.0
if version > 8.3
object network INSIDE
subnet 192.168.5.0
object network DMZ
subnet 192.168.2.0
nat(inside,DMZ) source static INSIDE INSIDE destination static DMZ DMZ
Regards
Alain
Don't forget to rate helpful posts.
Don't forget to rate helpful posts.