Hi,
My network has got DMZ(192.168.0.0/24) and LAN(172.29.8.0/24) segments.
I want to do static nat one of the DMZ server 192.168.0.10 to LAN address 172.29.8.180.
And also want to alow the DMZ server to to be access from Internet.
I have VPN setup between LAN 172.29.8.0/24 and 172.29.150.0/24 (H.0).
So after the doing the static NAT of DMZ server(192.168.0.10) to LAN address(172.29.8.180) is it possible to access the DMZ server from H.O thru VPN?
!
interface FastEthernet0/0
description Interface Inside$FW_INSIDE$
ip address 172.29.8.100 255.255.255.0
!
interface FastEthernet0/1
description Interface Outside$FW_OUTSIDE$
ip address A.B.C.2 255.255.255.0
!
interface Vlan1
description Interface DMZ$FW_DMZ$
ip address 192.168.0.1 255.255.255.0
!
ip nat pool pool-1 A.B.C.30 A.B.C.31 netmask 255.255.255.0
ip nat inside source route-map SDM_RMAP_1 pool pool-1 overload
ip nat inside source static 192.168.0.10 A.B.C.24 route-map SDM_RMAP_1 extendable no-alias
ip nat inside source static 192.168.0.10 172.29.8.180 route-map VPN-DMZ-LAN extendable no-alias
!
route-map SDM_RMAP_1 permit 1
match ip address 104
!
route-map VPN-DMZ-LAN permit 1
match ip address 115
!
#show access-list 104
Extended IP access list 104
10 deny ip 172.29.8.0 0.0.0.255 172.29.150.0 0.0.0.255
20 deny ip 192.168.0.0 0.0.0.255 172.29.150.0 0.0.0.255 <<<===Is this statement required?
30 permit ip 192.168.0.0 0.0.0.255 any
40 permit ip 172.29.8.0 0.0.0.255 any
#
#show access-list 115
Extended IP access list 115
10 permit ip 172.29.8.0 0.0.0.255 172.29.150.0 0.0.0.255
#
