How to put public address in DMZ on PIX

[deanchall]

Need server to have and be addressed by a public address. This is due to use of Microsoft DCOM which encodes ip address in dcom packets. How would I configure PIX so server with public address i.e. 190.22.23.24 with no natting, can sit in dmz and be accessed by internet. I am familiar with mapping public to private addresses.

[jmia]

Dean,

Take a look/read of the following URL, this URL shows how to setup the PIX for mail server access on DMZ. You can subsitute the mail server for what ever server you want to place in the DMZ.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008015efa9.shtml

Hope this helps.

Jay

[Patrick Iseli]

You just have to add an access-list on the outside interface that permits that traffic from the outside to the dmz interface.

Your DMZ Network uses allready Public IPs so there is not need for NAT.

Otherwise use this:

PIX(config)# access-list NONAT permit ip DMZnet DMZSubnet Externalnet Esubnet

PIX(config)# nat (dmz) 0 access-list NONAT

sincerely

Patrick