Cisco VPN Client terminating on my inside interface, can I allow access to my DMZ?

Posted on 2004-11-12
Last Modified: 2013-11-16
Hello!  I recently got my Cisco VPN client working to my Pix520 and it's working like a champ!  However, I want to be able for my employees to access our DMZ as well just as if they were sitting at their desk at work.  I've tired numerous router statments but I'm wondering if I'm going over to many hops on my firewall?  Anyone have any thoughts?

I can browse the internal network fine, but simply can access or ping my DMZ.  I believe it's a too many hops in and out of the firewall, but thought I would ask here to be sure.  

Thanks in advance!
Question by:TJanousek
    1 Comment
    LVL 5

    Accepted Solution


    Were is your DMZ? On the same PIX? If so just do:

    access-list nonat permit ip x.x.x.x y.y.y.y
    nat (dmz) 0 access-list nonat

    x.x.x.x = DMZ range
    y.y.y.y = VPN client range

    If you have use split tunneling you will have to add the DMZ range to that access-list too.

    good luck...

    P.S. To better asist you it's always a good idea to post your config.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
    This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now