topic Re-IP DMZ to private space, NAT to public in Network Security

Re-IP DMZ to private space, NAT to public

dtraverso13 — Mon, 11 Mar 2019 17:23:15 GMT

Greetings,

After the initial information gathering, I find I am at a standstill as-to how I should procede.

We are currently in the process of implementing One-to-One static NAT'ing on our DMZ servers, and RE-IP'ing them to private IP space.

We need to enable DNS resolution, LDAP authentication between the DMZ servers and our network, while making them accessible tobi the public.

I'm hoping for a bit of hand-holding on this issue, since I am not sure where to begin.

Re: Re-IP DMZ to private space, NAT to public

dan_track — Thu, 18 Mar 2010 14:39:43 GMT

On which platform are you going to do this? Can you post current configuration?

Dan

Re: Re-IP DMZ to private space, NAT to public

vilaxmi — Sat, 20 Mar 2010 02:46:54 GMT

Hello,

Static translation for DMZ server :

static (dmz,outside) netmask 255.255.255.255

access-list inbound extended permit tcp any host

access-group inbound in interface outside // to permit the inbound TCP connections from any outside IP address to the public IP address of server//

Now, coming to your DNS resolution, I would need to know, where is you DNS server located ? For the external clients, external DNS server would take care of name resoultion.

Thank

Vijaya