is this a legal combo of options?

[ph0enix]

global (outside) 1 interface

nat (inside) 1 10.0.0.0 255.255.255.0

nat (dmz) 1 172.168.0.0 255.255.255.0

[Fernando_Meza]

yes it is correct ...

Traffic from inside and the DMZ will be nated to the OUtside interface for outgoing traffic.

Please rate if it helps

[ph0enix]

Thanks! ...That's precisely what I had in mind. Now I just need to make the "dmz" accessible from "inside" but not the other way around. Will something like this work?

static (inside,dmz) 172.16.0.0 172.16.0.0 netmask 255.255.255.0

[jmia]

YES!!!

Jay

[ph0enix]

Just one more question. How do I configure the acces-list for 10.0.0.0/24 to 172.16.0.0/24 access?

Thank you!

[ph0enix]

Wait a minute, shouldn't it be:

static (inside,dmz) 10.0.0.0 10.0.0.0 netmask 255.255.255.0

since the dmz is 172.16.0.0/24?

[ph0enix]

I'm all set after doing:

static (inside,dmz) 10.0.0.0 10.0.0.0 netmask 255.255.255.0

Thank you!