Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

pix 515 with internal outside and dmz cannot reach internet from dmz

Posted on 2003-11-04
2
Medium Priority
?
413 Views
Last Modified: 2010-04-17
what statments are required for my dmz to access the outside interface? I can currently access the dmz from the inside and my internet site on my dmz works externally I just cannot reach the internet from the webserver.
0
Comment
Question by:CMorehosue
2 Comments
 
LVL 13

Accepted Solution

by:
td_miles earned 1000 total points
ID: 9684702
I'm assuming you current config looks something like this (parts of):

global (outside) 1 interface
nat (inside) 1 192.168.1.0 255.255.255.0 0 0
static (dmz,outside) tcp w.x.y.z 80 172.16.1.11 80 netmask 255.255.255.255 0 0

(where w.x.y.z is the real IP address that you access your webserver by).

To add Internet access to the DMZ, add the following line:

nat (dmz) 1 172.16.1.0 255.255.255.0 0 0

which will allow the traffic from the "dmz" interface with ip address in the subnet 172.16.1.0 to be NAT'ed to the global outside IP address. The dmz interface will be a higher level than the outside, so it should just work with this. (obviously change the interface name to whatever yours is called and the IP address range to your DMZ range)

For reference:
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/config/bafwcfg.htm#1067203
0
 

Author Comment

by:CMorehosue
ID: 9688222
Thanks TD that was my problem worked like a charm
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the hope of saving someone else's sanity... About a year ago we bought a Cisco 1921 router with two ADSL/VDSL EHWIC cards to load balance local network traffic over the two broadband lines we have, but we couldn't get the routing to work consi…
In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

782 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question