Forwarding decrypted traffic to host behind PIX DMZ Interface

davelockerby — Fri, 21 Feb 2020 06:40:23 GMT

I need some direction or documentation links on how to pull-off the following on the PIX firewall:

1. Terminate VPN traffic on PIX (accomplished)

2. Filter decrypted traffic with access-lists on outside interface (accomplished)

3. Forward/Route decrypted taffic to host on DMZ vs. Inside Interface located on same PIX firewall (not sure how to pull this off - does the "connected route" take care of this?)

4. Same host behind PIX DMZ interface needs to forward traffic to host located behind Inside interface on same PIX firewall.

If anyone knows of Cisco documentation links, that can help with the above issues, please post.

Thanks in advance for any and all help!

Cheers.

Re: Forwarding decrypted traffic to host behind PIX DMZ Interfac

afakhan — Tue, 08 Apr 2003 03:16:28 GMT

Ans3. If its a L2L, make sure that you have :

nat (dmz) 0 access-list

just like you migh thave :

nat (inside) 0 access-list ACL#

4 - That would require NAT/Global, or static configuration AND acess-list to permit traffic on the PIX.

Thx

Afaq

topic Forwarding decrypted traffic to host behind PIX DMZ Interface in Network Security

Forwarding decrypted traffic to host behind PIX DMZ Interface

Re: Forwarding decrypted traffic to host behind PIX DMZ Interfac