Advertisement

07.03.2008 at 05:53AM PDT, ID: 23536599
[x]
Attachment Details

Unable to communicate from Internal Network to DMZ Web Server

Asked by ptcis in Networking Hardware Firewalls, Microsoft IIS Web Server, Networking Hardware

Tags: , ,

I have a web server set up on my DMZ.  I am currently unable to communicate from my internal network to web server.  I used a outside internet connect and was able to get to the web site no issue, but from inside...not so much.  Here is my CLI setup.  Can anyone let me know if I am missing something.  Thanks.Start Free Trial 
1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62:
63:
64:
65:
66:
67:
68:
69:
70:
71:
72:
73:
74:
75:
76:
77:
78:
79:
80:
81:
82:
83:
84:
85:

!
interface Ethernet0/0
 nameif outside
 security-level 0
 ip address x.x.85.178 255.255.255.240 
!
interface Ethernet0/1
 nameif inside
 security-level 100
 ip address 192.168.6.3 255.255.255.0 
!
interface Ethernet0/2
 nameif guest
 security-level 50
 ip address 192.168.100.1 255.255.255.0 
!
interface Ethernet0/3
 shutdown
 no nameif
 security-level 0
 no ip address
!
interface Management0/0
 nameif management
 security-level 100
 ip address 192.168.254.1 255.255.255.0 
 management-only
!
passwd uwdQIX4kuXiD6gGn encrypted
boot system disk0:/asa803-k8.bin
ftp mode passive
clock timezone EST -5
clock summer-time EDT recurring
dns server-group DefaultDNS
 domain-name parmatube.com
access-list outside_in extended permit icmp any any echo-reply 
access-list ptcremotevpn standard permit 192.168.6.0 255.255.255.0 
access-list nonat extended permit ip 192.168.6.0 255.255.255.0 192.168.8.0 255.255.255.0 
access-list nonat extended permit ip 192.168.1.0 255.255.255.0 192.168.8.0 255.255.255.0 
access-list nonat extended permit ip 192.168.1.0 255.255.255.0 host 192.168.1.4 
access-list nonat extended permit ip 192.168.6.0 255.255.255.0 PTCKZ 255.255.255.0 
access-list nonat extended permit ip 192.168.1.0 255.255.255.0 PTCKZ 255.255.255.0 
access-list nonat extended permit ip 192.168.1.0 255.255.255.0 192.168.4.0 255.255.255.0 
access-list outside_access_in extended permit gre any host x.x.85.179 
access-list outside_access_in remark Enkoo
access-list outside_access_in extended permit tcp any host x.x.85.180 eq https 
access-list outside_access_in remark Enkoo
access-list outside_access_in extended permit 80 any host x.x.85.180 
access-list outside_access_in extended permit tcp any host x.x.85.180 eq www 
access-list outside_access_in extended permit tcp any host x.x.85.178 eq www 
access-list outside_access_in extended permit 80 any host x.x.85.178 
access-list outside_1_cryptomap extended permit ip 192.168.1.0 255.255.255.0 192.168.4.0 255.255.255.0 
access-list inside_nat0_outbound extended permit ip 192.168.1.0 255.255.255.0 192.168.8.0 255.255.255.0 
access-list inside_nat0_outbound extended permit ip 192.168.1.0 255.255.255.0 PTCKZ 255.255.255.0 
access-list outside_2_cryptomap extended permit ip 192.168.1.0 255.255.255.0 PTCKZ 255.255.255.0 
pager lines 24
logging enable
logging asdm informational
mtu outside 1500
mtu inside 1500
mtu guest 1500
mtu management 1500
ip local pool VPNPool 192.168.8.1-192.168.8.32 mask 255.255.255.0
no failover
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-603.bin
asdm location x.x.85.179 255.255.255.255 inside
asdm location PTCKZ 255.255.255.0 inside
no asdm history enable
arp timeout 14400
nat-control
global (outside) 1 interface
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 1 192.168.1.0 255.255.255.0
nat (inside) 1 192.168.6.0 255.255.255.0
nat (inside) 1 0.0.0.0 0.0.0.0
nat (guest) 1 0.0.0.0 0.0.0.0
static (guest,outside) tcp interface www 192.168.100.10 www netmask 255.255.255.255  dns 
static (inside,outside) 205.217.85.179 192.168.1.119 netmask 255.255.255.255 
static (inside,outside) 205.217.85.180 192.168.1.4 netmask 255.255.255.255 
static (inside,guest) 192.168.1.0 192.168.1.0 netmask 255.255.255.0 
static (guest,inside) 192.168.100.10 x.x.85.178 netmask 255.255.255.255 
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 x.x.85.177 1
route inside 192.168.1.0 255.255.255.0 192.168.6.2 1
 
Keywords: Unable to communicate from Internal N…
Title
1 DIFFICULT Forest Trust w/ DMZ issue…
2 Pix 515e dmz configuration
3 AD in DMZ
4 Windows servers in the DMZ
5 VPN clients unable to access DMZ zone
6 OWA, DMZ, ISA Server, PIX
 
Loading Advertisement...
 
[+][-]07.03.2008 at 07:06AM PDT, ID: 21925560

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]07.03.2008 at 07:31AM PDT, ID: 21925819

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]07.03.2008 at 07:39AM PDT, ID: 21925884

At Experts Exchange, members can ask their questions to thousands of technology professionals, also known as Experts. Experts compete and collaborate to answer those questions by leaving comments like this one.

Start your 7-day free trial to view this Expert Comment or ask the Experts your question.

 
[+][-]07.03.2008 at 08:13AM PDT, ID: 21926218

Often, when Experts are collaborating with members who have asked questions, they will request additional information about the problem. Askers respond with an author comment like this one.

Start your 7-day free trial to view this Author Comment or ask the Experts your question.

 
[+][-]07.17.2008 at 09:06AM PDT, ID: 22026977

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zones: Networking Hardware Firewalls, Microsoft IIS Web Server, Networking Hardware
Tags: Cisco, ASA, ASA 5510
Sign Up Now!
Solution Provided By: ck459
Participating Experts: 2
Solution Grade: C
 
 
 
Loading Advertisement...
20080716-EE-VQP-32 / EE_QW_2_20070628