Can inside hosts talk to external NAT IP

[paul.pink]

Scenario - A firewall with 3 interfaces inside(172.30.1.0/24), dmz(17216.1.0/24)., outside(200.200.1.0/24). 

A static NAT is created for DMZ server (172.16.1.10) to  public IP (200.200.1.10)

static (dmz, outside) 200.200.1.10 172.16.1.10 netmask 255.255.255.255

Can hosts on the inside netwrok communicate with the server in the DMZ if the request is sent to the NAT IP (http://200..200.1.10.. example only)

W/o a nat (inside,outside) statement this will be impossibe, but if there is a nat (inside,outside) x statement,/global(outsie) x, could this work

customer wants to know if it is possible

Thanks

[varrao]

HI Paul,

If the inside users wants to access the server on the DMZ, they would need the following nat statements:

static (dmz,inside) 200.200.1.10 172.16.1.10

nat (inside) 1 0.0.0.0 0.0.0.0

global (dmz) 1 interface

The last two nat statements would be required if you have nat-control enabled, otherwise not.

Hope this helps

Thanks,

Varun