Communicating between two internal interfaces

RBenke — Fri, 21 Feb 2020 16:08:06 GMT

I inherited this firewall configuration, so don't ask why it's the way it is.

Here's the scenario:

Inside_1, security level 100

Inside_2, security level 10

Outside, security level 0

I need to allow clients on Inside_2 to connect to a web server on Inside_1.

I know there's more than one piece to this. Right now, I'm just trying to answer this question:

Can this be made to work with the existing security levels, or must I make both Inside interfaces the same security level? Is there any downside to doing so?

Re: Communicating between two internal interfaces

Rob Ingram — Tue, 21 Aug 2018 18:52:38 GMT

Hi,
You need to create an ACL to permit traffic from a lower security level to a higher security level. So if you create an inbound ACL on Inside_1 and permit the traffic you need. Ensure that NAT is going to interfere by not natting between the 2 networks behind the interfaces.

HTH

topic Re: Communicating between two internal interfaces in Network Security

Communicating between two internal interfaces

Re: Communicating between two internal interfaces