Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

Not sure why static command is in config.

I took over management of a PIX520 ver. 6.2(2) and there is the following command for each of the networks on the private lan. "static (inside,DMZ) 172.30.0.0 172.30.0.0 netmask 255.255.0.0 0 0". What is this command doing?

1 REPLY
Silver

Re: Not sure why static command is in config.

It allows the inside networks to access the DMZ without being translated. That is a standard configuration, though some would argue if the DMZ is accessed directly from the Internet then inside networks should be translated to hide your internal numbering schemes.

94
Views
0
Helpful
1
Replies
CreatePlease to create content