• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 241
  • Last Modified:

ASA:Accessing Outside Servers and DMZ servers at a time

Hi,

Here my requirement is

I want to access internet (outside) and our DMZ-1(security Interface 90) servers and
DMZ-2 Servers (security level 80) at a time .

My System is in Inside Interface (Secuirty is default 100) and Ip address is 172.16.10.22

Regards
ramu
0
RAMU CH
Asked:
RAMU CH
2 Solutions
 
Ernie BeekExpertCommented:
Well, normally when your behind the highest security interface you should be able to get to all lower level interfaces. You're implying that you cannot do that?
0
 
MikeKaneCommented:
Can you post a sanitized config and a SHOW VER result...
0
 
RAMU CHAuthor Commented:
Hi Erniebeek,

Conceptually it is true but technically it is not happening , i have to NAT my PC with the respective
Outside/DMZ range IP's
0
 
Feroz AhmedSenior Network EngineerCommented:
Hi,

To Access Outside Network or Internet the configuration should be as below on pix.

ASA(config t)#access-list 101 permit icmp any any echo-reply
ASA(config t)#access-group 101 in interface outside
with above configuration you should be able to access outside and dmz servers in Network .
0
 
RAMU CHAuthor Commented:
Thanks
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now