Add two different network in DMZ zone

[Dhaval Dikshit]

Hello,

Ihave ASA 5505.

I would like to use two different subnet (i.e. 192.168.X.X and 10.0.X.X) in DMZ and accessible it to outside network. I have 2 free live IP as well.

Can somebody, please guide me for doing same?

Regards,

DD

[Vibhor Amrodia]

Hi,

I think you would have to use another device connected behind the ASA unit to make this happen.

As you are using two different subnet , you can use a Layer 3 router and configure the static route on the ASA device for the subnet behind the router.

Thanks and Regards,

Vibhor Amrodia

[Dhaval Dikshit]

Thanks...

Is it possible through creating two DMZ...Like on one ASA interface configure DMZ and on other interface configure DMZ-1?

Thanks & Regards,

DD

[Vibhor Amrodia]

Hi,

yes , that would also be possible. In that case , you would be configuring two different vlans on the ASA for the subnet.

Thanks and Regards,

Vibhor Amrodia

[Dhaval Dikshit]

Thanks Vibhor...

I'll go with that and post here the result.

Thanks & Regards,

DD