DMZ on 2811 conf guide request

[grzegorzniecka]

hello!

I need to reconfigure DMZ (several external servers) on ISR2811.

I kindly request for design scenarios, configuration guides for DMZ (best with ISA server in LAN) on cisco.com or other.

thanks in advance.

[htarra]

Here is a configuration for a DMZ ,,,

!

interface GigabitEthernet0/1

nameif DMZ

security-level 50

ip address x.x.x.x 255.255.255.y

!

access-list dmz_access_in extended permit icmp any any

!

access-list DMZ_nat0_outbound extended permit ip x.x.x.0 255.255.255.y any

!

access-list DMZ_access_in extended permit tcp any any eq domain

access-list DMZ_access_in extended permit tcp any any eq hostname

!

mtu DMZ 1500

!

access-group DMZ_access_in in interface DMZ

[grzegorzniecka]

thanks for You request but I need a concept scenario, how propertly design DMZ.

configuration exapmles are secondary matters.