how can i access dmz server via public ip from inside?

[zhaoyuzang]

hi all !

As shown in Figure，how can i access the server in dmz zone via public？

i can access it via private ip 192.168.1.1 now,but i can't access it via 101.100.1.2.

who can help me ?

thank you !

[Jouni Forss]

Hi,

You would have to configure Static NAT from DMZ to INSIDE for the server in the same way you have done for DMZ to OUTSIDE.

Basically in the following way for example

object network DMZ-WEB

host 192.168.1.1

nat (dmz,inside) static 101.100.1.2

This would enable your users on the "inside" to access the "dmz" server with the public IP address. And naturally only with the public IP address after this NAT.

Hope this helps

Please do remember to mark a reply as the correct answer if it answered your question.

Feel free to ask more if needed

- Jouni