Dear All,
Please guide me on below query
Server 10.1.1.1
|
| dmz
R3-----outside----ASA-inside--------PC-B
Internet |
|
|
server
in above scenario, i am configuring object-nat to nat traffic from server 10.1.1.1 with outside interface to go to internet but why we need to permit real server IP 10.1.1.1 in ACL on outside interface ?
object network REAL-SERVER
host 10.1.1.1
nat (DMZ,OUTSIDE) static 97.1.1.1 service tcp https https
access-list OUTSIDE-IN permit tcp any object REAL-SERVER eq 443
access-group OUTSIDE-IN in interface OUTSIDE
why we need to permit above statement where we are defining real ip address for server ?
regards,
