Expiring Today—Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

pix 515 with internal outside and dmz cannot reach internet from dmz

Posted on 2003-11-04
2
Medium Priority
?
411 Views
Last Modified: 2010-04-17
what statments are required for my dmz to access the outside interface? I can currently access the dmz from the inside and my internet site on my dmz works externally I just cannot reach the internet from the webserver.
0
Comment
Question by:CMorehosue
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 13

Accepted Solution

by:
td_miles earned 1000 total points
ID: 9684702
I'm assuming you current config looks something like this (parts of):

global (outside) 1 interface
nat (inside) 1 192.168.1.0 255.255.255.0 0 0
static (dmz,outside) tcp w.x.y.z 80 172.16.1.11 80 netmask 255.255.255.255 0 0

(where w.x.y.z is the real IP address that you access your webserver by).

To add Internet access to the DMZ, add the following line:

nat (dmz) 1 172.16.1.0 255.255.255.0 0 0

which will allow the traffic from the "dmz" interface with ip address in the subnet 172.16.1.0 to be NAT'ed to the global outside IP address. The dmz interface will be a higher level than the outside, so it should just work with this. (obviously change the interface name to whatever yours is called and the IP address range to your DMZ range)

For reference:
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/config/bafwcfg.htm#1067203
0
 

Author Comment

by:CMorehosue
ID: 9688222
Thanks TD that was my problem worked like a charm
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this tutorial I will show you with short command examples how to obtain a packet footprint of all traffic flowing thru your Juniper device running ScreenOS. I do not know the exact firmware requirement, but I think the fprofile command is availab…
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question