DMZ to inside and inside to Dmz

[bartollo1]

I am trying to setup a dmz to talk to my internal network and the internal network to talk to the dmz.

Any ideas

[Collin Clark]

Create the translation-

static (inside,intf2) 1.30.30.0 1.30.30.0 netmask 255.255.255.0

The add an ACL to restrict traffic-

access-list dmz_access_out permit udp any host yyy.yyy.yyy.9 eq 53

Then apply to the interface-

access-group dmz_access_out in interface intf2

Hope that helps

[bartollo1]

Thanks for the reply chris.

I need to allow all traffic to the internal network from the DMZ and All traffic from the DMZ to the internal network.

[Collin Clark]

access-list dmz_acl permit ip 172.30.30.0 255.255.255.0 1.30.30.0 255.0.0.0

access-group dmz_acl in interface intf2

inside has default permit any so you're OK there.