cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
510
Views
5
Helpful
5
Replies

DMZ servers unable to reach internet

fadarekehinde
Level 1
Level 1

I had the ip address conflict problem on the dmz network, i removed proxyarp on the dmz interface on the firewall it sorted it. Another issue i am experiencing right now is that my natted DMZ servers are unable to reach the internet. what could be responsible?

5 Replies 5

colquist
Level 1
Level 1

Can you post your config?


asa

Are these the only servers in the DMZ:

SMTPserver

IAG

10.13.199.24

BNG_UAG_INT

If there are more, then you will need a nat (dmz) 1 statement for them as well.

These are the servers we have for now and creating more on the Hyper-v. i will try that as well.

try adding the following two lines to the end of your DMZ ACL

access-list dmz-in extended deny ip 10.0.0.0 255.0.0.0 10.0.0.0 255.0.0.0

access-list dmz-in extended permit ip any any

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: