Cannot RDP to server in DMZ from VPN

[perptech1]

On my ASA5510, i cannot rdp to host 172.16.110.210 in the DMZ from VPN (10.98.98.0), but can access it from internal.  I thought my NAT statement would be all i need (static (inside,SP_DMZ) 10.98.98.0 10.98.98.0 netmask 255.255.255.0), but still doesn't work.  Any thoughts on what i am missing.

[Loren Kolnes]

Hi Jason,

The zip file contains only the nat exemption access-list and nat configuraiton, did you attach the wrong file?

Thanks,

Loren

[perptech1]

Loren,

Sorry about that.  Here you go

[Kelvin Willacey · Accepted solution]

I think you probably just need a nonat on your dmz interface. Do you see any nat errors in the log when you try to connect to the dmz server?

[perptech1]

That was it.  Thanks for the help!