Opening ports to internal network

[Lharrypersaud]

I have a pix 515. I have my internal network which is using a private address i.e. 192.168.2.0 and a dmz which hosts my webservers and dns servers. I need to backup the servers on the dnz using commvault but i was told that i have to create a static mapping to the commvault machine using a public address and and then open the port to the commvault machine. Is this true or is there a workaround?

Thanks for any help.

[jackko]

yes, ports need to be opened between the dmz server and the inside server for backup. however, static mapping using public ip is not necessary. you may do static mapping with private ip.

e.g.

static (inside,dmz) netmask 255.255.255.255

static (dmz,inside) netmask 255.255.255.255

access-list 101 permit tcp host host eq xxx

access-group 101 in interface dmz

[Lharrypersaud]

That example is very clear. I will try it a bit later.

Thanks Jackko