NAT Global Assistance Please

[eford]

Hi Guys..

        Can anyone explain this in a clear and easy to follow explaination please.

I'm trying to allow ping from inside to dmz to outside.

- Inside: 10.0.0.1 /16

- dmz: 172.30.1.1 /16

- outside interface is: 192..168.1.200 /24

How do I put in the dmz nat: ::

global (outside) 1 interface

nat (inside) 1 0.0.0.0

nat (dmz) 1 0.0.0.0

or

global (outside) 1 interface

global (dmz) 1 interface

nat (inside) 1 0.0.0.0

I do understand that the ACL's are next but I'm not sure if I need two global interfaces? What is the correct way to put in the dmz into nat 1?

Thank You

[Georg Pauwen]

Hello,

I am not clear on what you are trying to achieve. 

--> I'm trying to allow ping from inside to dmz to outside.

Do you want to ping from both the inside and the DMZ to the outside ?

[eford]

Yes.. Ping from DMZ and inside to internet. Also ping dmz from inside..

Which nat statement below is the correct way of doing this and why?

Thank You

[Georg Pauwen]

Hello,

your first syntax will work:

global (outside) 1 interface

nat (inside) 1 0.0.0.0

nat (dmz) 1 0.0.0.0