Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

PIX From inside user to DMZ host

I had a PIX 515 w/Inside(172.16.0.0),Outside & DMZ(192.168.105.0). One particular server located on DMZ network. This particular server only serve internal users (not for Internet).Can I set the server allow 172.16.0.0 users only & let internal users connect particular server using(192.168.105.X).

Also,the TCP connections fail between Inside and DMZ when I apply access-list permit IP any any on DMZ interface. UDP & ICMP success.

1 REPLY
bz
Community Member

Re: PIX From inside user to DMZ host

I'm a newbie...but I think it goes something like this:


static (inside, dmz) 172.16.0.0 172.16.0.0 netmask 255.255.0.0


nat (inside) 0 0 0


If you didn't bound any ACLs to the Inside interface, this should work.

106
Views
0
Helpful
1
Replies
CreatePlease to create content