topic ASA 5510, DMZ, NAT in Network Security

ASA 5510, DMZ, NAT

shortnathan — Mon, 11 Mar 2019 11:41:41 GMT

Hi,

I'm new to the ASA and I'm trying to set up a demo 5510 in a test environment.

There is a webserver in the DMZ that I'd like to make accessible to the inside and the outside. I have a /27 and would like to use a different IP than the interface for the webserver and I can't figure out how to get this working.

The webserver is at 172.16.0.176 and I would like to use xx.xx.184.88 to reach it from the outside. The outside interface on the ASA is xx.xx.184.90. Inside is 10.39.0.0.

Any tips?

Re: ASA 5510, DMZ, NAT

acomiskey — Mon, 10 Dec 2007 19:13:53 GMT

static (DMZ,outside) xx.xx.184.88 172.16.0.176 netmask 255.255.255.255

access-list outside_access_in extended permit tcp any host xx.xx.184.90 eq www

access-group outside_access_in in interface outside

Re: ASA 5510, DMZ, NAT

Alan Huseyin Kayahan — Mon, 10 Dec 2007 19:15:14 GMT

Hi Nathan

static (DMZ,outside) xx.xx.184.88 172.16.0.176 netmask 255.255.255.255

access-list outside_access_in permit tcp any host xx.xx.184.88 eq desiredportnumberhere

For reaching from inside

static (inside,DMZ) 172.16.0.176 172.16.0.176 netmask 255.255.255.25

Regards

Re: ASA 5510, DMZ, NAT

shortnathan — Mon, 10 Dec 2007 22:42:00 GMT

Thanks, that worked great!