topic Re: DMZ access to second Internet Router in Network Security

DMZ access to second Internet Router

chenbs — Mon, 11 Mar 2019 10:35:51 GMT

Hi,

I have a Cisco PIX 515E router with an unrestricted license. My internal users can access the internet via the leased line router connected to the outside interface. The DMZ users currently get out to the internet the same way. However, I have been asked to give them Internet access through another internet router. I have connected the other Internet router to another interface and have used nat(dmz)2 and global(dmz2)2 to translate the addresses. Is this correct? Can I have another default route pointing to the second Internet router i.e route DMZ2 0 0 x.x.x.x ?

Thanks

Re: DMZ access to second Internet Router

acomiskey — Tue, 26 Jun 2007 15:31:51 GMT

"Can I have another default route pointing to the second Internet router i.e route DMZ2 0 0 x.x.x.x ?"

No you cannot, but you can use the interface for backup.

Re: DMZ access to second Internet Router

chenbs — Tue, 26 Jun 2007 20:15:08 GMT

Hi,

I guess I'll have to point their gateway to the ADSL router and let it route non internet traffic back to the firewall for printer access.

Thanks