08-27-2015 12:03 PM - edited 03-11-2019 11:30 PM
I have an ASA version 9.0.1 and I need a way for the DMZ to talk to the Outside network. This is what I have so far but it is not working.
access-list outside_access_in_1 extended permit tcp any host 1.2.3.1 any
access-group outside_access_in_1 in interface outside
<config>
interface Vlan1
nameif inside
security-level 100
ip address 10.0.0.1 255.255.255.0
!
interface Vlan100
nameif outside
security-level 0
ip address 1.2.3.1 255.255.255.0
!
interface Vlan110
nameif DMZ
security-level 50
ip address 192.168.1.1 255.255.255.0
</config>
08-27-2015 01:17 PM
Not sure what you mean here.
Is your outside interface using a public IP and do you just want your DMZ devices to connect to the internet or do you want external devices on the internet to be able to connect to DMZ devices on certain ports ?
What exactly do you want to achieve ?
Jon
08-27-2015 01:57 PM
My ISP gives me a some public IP's these IP's are on the outside. I would like my DMZ network to be able to communicate to the network on the outside. Right now I can not ping my outside IP's from the DMZ network side.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide