topic Re: NAT with official IP on DMZ in Network Security

NAT with official IP on DMZ

keynet — Mon, 11 Mar 2019 10:07:29 GMT

Hello

I have a PIX 515E (Ver.6.3.1)with three interfaces. Now I d'like to activate the DMZ interface with a official IP-address range.

Between the internel and outside interface is a NAT (PAT) configuration active. No, I have problems to configure the NAT for the DMZ interface. With the official IP-adresses on the DMZ, it is not necessary to make NAT. I d'like to configure a simple routing between the internal to DMZ and between the ouside to DMZ.

How I is the NAT configuration for the a DMZ with official IP-adresse?

Regards

Pascal

Re: NAT with official IP on DMZ

Jon Marshall — Tue, 01 May 2007 10:10:52 GMT

Hi Pascal

As an example lets say your DMZ addressing is

212.73.45.0/28

on your pix firewall

static (DMZ,outside) 212.73.45.0 212.73.45.0 netmask 255.255.255.240

As long as the ISP routes these addresses to your pix external interface you should have no problem.

HTH

Jon