topic Cisco DMZ in Network Security https://community.cisco.com/t5/network-security/cisco-dmz/m-p/2052840#M398464 <HTML><HEAD></HEAD><BODY><P> Hello Joe,</P><P></P><P>please apply&nbsp; the following commands</P><P></P><P>static (inside,dmz) 10.2.0.0 10.2.0.0 netmask 255.255.0.0</P><P></P><P>and if you want ping from lan to DMZ, you can apply</P><P></P><P>access-list dmz_access_in extended permit icmp any any</P><P></P><P>access-group dmz_access_in in interface DMZ</P><P></P><P>please let me know if you need further help</P><P>regards</P><P>Harish.</P></BODY></HTML> Mon, 01 Oct 2012 08:18:15 GMT Harish Balakrishnan 2012-10-01T08:18:15Z Cisco DMZ https://community.cisco.com/t5/network-security/cisco-dmz/m-p/2052839#M398462 <P>Case closed</P> Tue, 12 Mar 2019 00:01:51 GMT https://community.cisco.com/t5/network-security/cisco-dmz/m-p/2052839#M398462 megamixmwangi 2019-03-12T00:01:51Z Cisco DMZ https://community.cisco.com/t5/network-security/cisco-dmz/m-p/2052840#M398464 <HTML><HEAD></HEAD><BODY><P> Hello Joe,</P><P></P><P>please apply&nbsp; the following commands</P><P></P><P>static (inside,dmz) 10.2.0.0 10.2.0.0 netmask 255.255.0.0</P><P></P><P>and if you want ping from lan to DMZ, you can apply</P><P></P><P>access-list dmz_access_in extended permit icmp any any</P><P></P><P>access-group dmz_access_in in interface DMZ</P><P></P><P>please let me know if you need further help</P><P>regards</P><P>Harish.</P></BODY></HTML> Mon, 01 Oct 2012 08:18:15 GMT https://community.cisco.com/t5/network-security/cisco-dmz/m-p/2052840#M398464 Harish Balakrishnan 2012-10-01T08:18:15Z Cisco DMZ https://community.cisco.com/t5/network-security/cisco-dmz/m-p/2052841#M398465 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>DMZ has lower security level than inside so you must have an ACL inbound on DMZ permitting the traffic from dmz to lan and the returning icmp messagesin reply to lan to dmz icmp messages ( as you've got no icmp inspection).</P><P></P><P>Nat is only necessary if you've NAT control enabled and in this case you'll need a static(inside,DMZ) statement in addition to the aforementioned ACL.</P><P></P><P>Regards.</P><P></P><P>Alain</P><P></P><P>Don't forget to rate helpful posts.</P></BODY></HTML> Mon, 01 Oct 2012 08:43:07 GMT https://community.cisco.com/t5/network-security/cisco-dmz/m-p/2052841#M398465 cadet alain 2012-10-01T08:43:07Z