Solved

pix , config dmz webserver to talk inside dns server

Posted on 2006-06-17
3
526 Views
Last Modified: 2010-04-09
I'm new to pix and I need my DMZ webserver to talk to my internal dns server. Do I need to create static entry or just
acl. Can you please give example. Thanks
0
Comment
Question by:rxn6057
  • 2
3 Comments
 
LVL 79

Accepted Solution

by:
lrmoore earned 125 total points
ID: 16926892
You have to do both:
Example:

ip address inside 192.168.123.1 255.255.255.0
ip address DMZ 192.168.124.1 255.255.255.0
name DNSSERVER 192.168.123.123
name WEBSERVER 192.168.124.24

access-list DMZ permit udp host 192.168.124.24 host 192.168.123.123 eq 53
access-list DMZ deny ip host 192.168.124.24 192.168.123.0 255.255.255.0
access-list DMZ permit ip host 192.168.124.24 any
static (inside,DMZ) 192.168.123.123 192.168.123.123 netmask 255.255.255.255
access-group DMZ in interface DMZ


0
 

Author Comment

by:rxn6057
ID: 16926941
Irmoore,
So, when traffic is going from low to high I will always need a static and acl entry. Is this correct?
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 16926999
Correct. Unless you upgrade to the new 7.x version (only for 515 and higher)
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
VMware vSwitch design best practice for ESXi hosts with 8x NIC ports 9 103
DHCP on ASA 3 51
Windows Server Firewall Configuration 2 27
OSPF metric and destination 2 37
Overview The Cisco PIX 501, PIX 506e, ASA 5505 and ASA 5510 (most if not all of this information will be relevant to the PIX 515e but I do not have a working configuration handy to verify the validity) are primarily used within small to medium busi…
Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now