Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

is this a legal combo of options?

global (outside) 1 interface

nat (inside) 1 10.0.0.0 255.255.255.0

nat (dmz) 1 172.168.0.0 255.255.255.0

6 REPLIES

Re: is this a legal combo of options?

yes it is correct ...

Traffic from inside and the DMZ will be nated to the OUtside interface for outgoing traffic.

Please rate if it helps

New Member

Re: is this a legal combo of options?

Thanks! ...That's precisely what I had in mind. Now I just need to make the "dmz" accessible from "inside" but not the other way around. Will something like this work?

static (inside,dmz) 172.16.0.0 172.16.0.0 netmask 255.255.255.0

Gold

Re: is this a legal combo of options?

YES!!!

Jay

New Member

Re: is this a legal combo of options?

Just one more question. How do I configure the acces-list for 10.0.0.0/24 to 172.16.0.0/24 access?

Thank you!

New Member

Re: is this a legal combo of options?

Wait a minute, shouldn't it be:

static (inside,dmz) 10.0.0.0 10.0.0.0 netmask 255.255.255.0

since the dmz is 172.16.0.0/24?

New Member

Re: is this a legal combo of options?

I'm all set after doing:

static (inside,dmz) 10.0.0.0 10.0.0.0 netmask 255.255.255.0

Thank you!

97
Views
10
Helpful
6
Replies
CreatePlease to create content