Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Mapping an address from dmz to inside?

I have a client router that I have no control over that I want to put in my DMZ and give it access to only 1 device on the inside network. I'm having a mental block on how to make this happen. I already have static (inside,dmz) for the server this router needs to be able to get at listed below.

static (inside,DMZ) 172.23.4.2 as400 netmask 255.255.255.255 0 0

how can I let this router in the dmz also access the as400?

1 REPLY
Gold

Re: Mapping an address from dmz to inside?

Hi -

Hope the following example helps your situation:

Pix(config)# global (outside) 1 200.200.200.10-200.200.200.253 netmask 255.255.255.0

Pix(config)# nat (inside) 1 0 0

Pix(config)# nat (dmz) 1 0 0

Pix(config)# static (dmz,outside) 200.200.200.1 192.168.5.5

Pix(config)# static (inside,dmz) 192.168.5.0 192.168.5.0 netmask 255.255.255.0

Pix(config)# access-list no_nat permit ip 192.168.2.0 255.255.255.0 192.168.5.0 255.255.255.0

Pix(config)# access-list no_nat permit ip 192.168.3.0 255.255.255.0 192.168.5.0 255.255.255.0

Pix(config)# nat (inside) 0 access-list no_nat

Pls. Remember the rule: From Interface Inside to Interface DMZ requires nat/global command.And DMZ to Inside requires static/conduit. Pls. issue cmd: 'clear xlate' after configuration has been saved with cmd: 'wr m' (write memory)

Thanks -

88
Views
0
Helpful
1
Replies