Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Opening ports to internal network

I have a pix 515. I have my internal network which is using a private address i.e. 192.168.2.0 and a dmz which hosts my webservers and dns servers. I need to backup the servers on the dnz using commvault but i was told that i have to create a static mapping to the commvault machine using a public address and and then open the port to the commvault machine. Is this true or is there a workaround?

Thanks for any help.

  • Other Security Subjects
2 REPLIES
Gold

Re: Opening ports to internal network

yes, ports need to be opened between the dmz server and the inside server for backup. however, static mapping using public ip is not necessary. you may do static mapping with private ip.

e.g.

static (inside,dmz) netmask 255.255.255.255

static (dmz,inside) netmask 255.255.255.255

access-list 101 permit tcp host host eq xxx

access-group 101 in interface dmz

New Member

Re: Opening ports to internal network

That example is very clear. I will try it a bit later.

Thanks Jackko

119
Views
0
Helpful
2
Replies