05-21-2011 05:53 AM - edited 03-11-2019 01:36 PM
i am trying to access server from 192.168.0.28 from 192.168.48.0/24 range on 50000 port but no able to do so.
diagram and config are attached herewith , kindly suggest in any changes needs to be done.
FIREWALL 2:
interface Ethernet0/1
description + + + + Connection 2 LAN (Inside) + + + +
speed 100
duplex full
nameif inside
security-level 100
ip address 192.168.48.254 255.255.255.0
!
interface Ethernet0/2
description + + + + CLIENT + + + +
nameif Client
security-level 90
ip address 192.168.49.250 255.255.255.0
nat (Client) 0 0.0.0.0 0.0.0.0
access-group client_access_in_1 in interface inside
access-group client_access_in in interface Client
access-list inside_access_in_1 extended permit ip any any
access-list client_access_in extended permit ip any any
FIREWALL1:
interface Ethernet0/1
description Server Zone
nameif Server
security-level 100
ip address 192.168.15.253 255.255.240.0
!
interface Ethernet0/3
description Client Zone
nameif client
security-level 90
ip address 192.168.39.253 255.255.240.0
nat (Server) 0 access-list nonatinside
nat (Server) 1 0.0.0.0 0.0.0.0
nat (client) 0 access-list nonatclient
nat (client) 1 0.0.0.0 0.0.0.0
access-group inside_access_in in interface Server
access-group client_access_in in interface client
access-list inside_access_in extended permit ip any any
access-list client_access_in extended permit ip any any
05-21-2011 06:06 AM
Hi,
Few things missing here for both the firewall:
FIrewall 2:
nat (inside) 1 0.0.0.0 0.0.0.0
global (outside) 1 interface
Firewall 1:
static (client,server) 192.168.0.28 192.168.0.28
Hope this helps.
Thanks,
Varun
05-21-2011 06:37 AM
i have one route for outside world. route outside 0.0.0.0 0.0.0.0 x.x.x.x 1 .in firewall 1 for internet connetivity.
do i need any other routes in my firewall .
also , can u explain why we need these commands
nat (inside) 1 0.0.0.0 0.0.0.0
global (outside) 1 interface
as i have already used
nat (client) 0.0.0.0 0.0.0.0 in my firewall.
also i don't have outside interface configured in my firewall 2.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide