topic Re: Brain Fart in Network Security

Brain Fart

patrick.hurley — Mon, 11 Mar 2019 13:18:30 GMT

Can I assign any ip address from the pool that I have been assigned to any host off any interface such as inside, DMZ1 and DMZ2 as long as I map them to a private subnet?

Re: Brain Fart

robertson.michael — Tue, 22 Jul 2008 22:08:36 GMT

Hi Patrick,

Let me make sure I understand your scenario:

You have a pool of public IP addresses assigned by your ISP. You want to map one of these addresses to a host behind your DMZ interface. Is this correct?

If so, you can simply configure a static translation, such as this:

static (dmz,outside) netmask 255.255.255.255

If the host behind the DMZ interface was, for example, a web server and you wanted users on the Internet to access it, you would also need to edit the ACL on your outside interface to allow the initial traffic to come in to your network.

Hope that helps.

-Mike

Re: Brain Fart

patrick.hurley — Tue, 22 Jul 2008 22:13:12 GMT

I guess because you are using the host address mask it doesn't matter where the host exists.