Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

NetScaler with Cisco ASA for Web DMZ

Hi, I have to design my DMZ. I am using Cisco ASA, Netscaler for that.

On the front end, I am using Cisco ASA 5440 having Public IP on outside & Private IP on DMZ interface.

I am connected Netscaler to DMZ interface of ASA. I will activate Private IP on both interfaces of Netscaler & would activate Static NAT of ASA for public IP which are registered with ISP.

I want to know, is it mandatory to enable Public IP on outside interface of Netscaler ? Or NAT on ASA for public IP will also work?

4 REPLIES
New Member

Re: NetScaler with Cisco ASA for Web DMZ

pls help champs.

Re: NetScaler with Cisco ASA for Web DMZ

Hi, I have to design my DMZ. I am using Cisco ASA, Netscaler for that.

On the front end, I am using Cisco ASA 5440 having Public IP on outside & Private IP on DMZ interface.

I am connected Netscaler to DMZ interface of ASA. I will activate Private IP on both interfaces of Netscaler & would activate Static NAT of ASA for public IP which are registered with ISP.

I want to know, is it mandatory to enable Public IP on outside interface of Netscaler ? Or NAT on ASA for public IP will also work?

Hi Rupesh,

If firewall is the front end for outside world then better and safe option you apply nat for private ip address of the netscaler and permit rule as per the requirement in ASA.

Hope to help

If helpful do rate the post

Ganesh.H

New Member

Re: NetScaler with Cisco ASA for Web DMZ

Thanks man.

New Member

Re: NetScaler with Cisco ASA for Web DMZ

I want to know one thing, like I will configure Static NAT on ASA which will convert Public IP to Private IP.

Is it possible to use Private IP on the outside interface of Netscaler or CSS which should work like VIP (Virtual Server IP)?

2121
Views
0
Helpful
4
Replies