cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
632
Views
0
Helpful
2
Replies

Issue after migrating from 891 to 1111. ZBF DMZ access not working

Richard Tapp
Level 1
Level 1

So I recently migrated a site from an 891 to an 1111-8P. But since then I have been unable to access a VOIP gateway in the ZBF DMZ on the router.

I can ping the GW & log into it from the LAN locally and the NATed IP of the gateway shows in the ARP table. But I can no longer connect to the GW from the outside world and I can't ping it either ( which we could on the old config ).

The site can also no longer make outbout calls via thw GW.

We regually migrate 891's to 1111-8P's without any issues, but none before have had a DMZ and I have tried everthing I can within ZBF, removing self zones, allowing IP any any in the ACLs etc.

There have been no changes to any external IPs and the local ISP can't ping the NAT either.

Has anyone else come across issues with multiple Zones on 1111-8's ?

2 Replies 2

Hi @Richard Tapp can you provide your full configuration for review?

Do you have NAT configured that could unintentially be translating traffic from the internal LAN to the DMZ network?

 

 
Review Cisco Networking for a $25 gift card