ASA 5505: access from Single Machine in DMZ to all internal machines on a specific port
Posted on 2011-09-26
WE have a pix on a stub network. We have 2 DMZs on it and want to allow a PC which is on it's own in one of the DMZ's and needs to contact the PC's on the internal network . Is it possible to do dynamic nat from outside to inside? Can I have an example based on below.
DMZ1 , Sec level 50 Int Address 192.168.2.1 /24 PC address 192.168.2.100
Inside, Sec level 100 Int Address 172.16.2.1 /16 PC address Range 172.16.2.10 - 20