troubleshooting Question

Cisco ASA 5510 DMZ needs access to outside

Avatar of zoojames
zoojamesFlag for United States of America asked on
RoutersHardware FirewallsNetworking Hardware-Other
5 Comments1 Solution1178 ViewsLast Modified:
I am trying to allow access to the internet from my dmz.  The postings I have read on this site specify setting up a NAT. Since my firewall is live and I do not want to loose my job, would the following NAT break anything given the current NAT setup on my ASA 5510....

CURRENT....
global (outside) 1 interface
nat (inside) 0 access-list nonat
nat (inside) 1 10.20.30.0 255.255.255.0
nat (ids) 1 172.16.0.0 255.255.0.0

WOULD LIKE TO ADD...

nat (dmz) 1 192.168.50.0 255.255.255.0

Will this break anything? Is this necessary to allow internet access from dmz? I have a VPN router in the dmz that needs to talk to another vpn router in another location.
ASKER CERTIFIED SOLUTION
Join our community to see this answer!
Unlock 1 Answer and 5 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 5 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros