DMZ with a PIX 515

[boschrexroth]

I have been asked to implement a DMZ with our PIX 515. I have a spare ethernet interface that I will use for the DMZ but that is about all I know about setting up a DMZ.

Could someone provide me with a sample config for a DMZ on a PIX 515? Also, any documentation to do with a DMZ would be helpful ex. how do you address your servers on the DMZ so that they can be access from the internet.

Thanks.

[scoclayton]

Hi,

Take a look at the following link and see if this doesn't help in at least getting you started. Any questions after taking a look, let us know.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_60/config/examples.htm#1020475

Scott

[boschrexroth]

On my DMZ I want to put a webserver. How can I configure my PIX to allow internet traffic to hit the webserver but not be allowed any access to my inside network. My webserver address is 192.168.10.1 so I need a nat statement also, correct?

I recently upgraded to IOS 6.3.3 and have heard that using access-group is better than conduit statements.

Thanks,

Scott