Solved

Route Public IP to DMZ

Posted on 2008-10-30
1
1,121 Views
Last Modified: 2012-05-05
Current config
Outside x.x.x.2/27
Inside x.x.x.1/16 Private Address
DMZ x.x.x.1/16 Private Address
We are using static NAT to publish all of our servers in the DMZ this works very well no issues. We are installing a OCS 2007 Edge server and one of the requirements is to have a public routable IP on the interface that does voice and video. Entry my problem, how do I get one of my public IPs routed through our ASA 5510 to the server.

I thought about adding a sub interface on another VLAN for this and assigning one of my public IPs to the sub interface and then another to the server nic. My question is will this cause routing issues? because basicly I would have the same network assigned to 2 interfaces but my default route statments are assined by interface. Very confusing, would like some guidance on this before I jump in and make a mess of things.
0
Comment
Question by:DAKARG
1 Comment
 
LVL 32

Accepted Solution

by:
harbor235 earned 500 total points
ID: 22842750


You have plent of interfaces you could also use a dedicated interface or the sub interface, either wayt it works.
The only problem is you need a unique network IP block for the sub or the physical interface, it cannot not be an IP in the same network as the outside interface.

You cannot have the same network assigned to 2 different interfaces

harbor235 ;}
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Cisco Pix/ASA hairpinning The term, hairpinning, comes from the fact that the traffic comes from one source into a router or similar device, makes a U-turn, and goes back the same way it came. Visualize this and you will see something that looks …
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question