I have a Pix 515 ver 6.2 that I'm trying to create a static map between my inside and DMZ interface. I have a host in the dmz that needs to access a database on the inside. I've tried setting it up several different ways, but when I following the manual I can't get it to work.
My inside interface is 192.168.114.1/24 and my DMZ interface is 10.61.3.1/24.
I created the following static per the manual:
static (inside,dmz) 10.61.3.1 host 192.168.114.5 netmask 255.255.255.255
access-list acl_dmz permit tcp 10.61.3.0 255.255.255.0 host 10.61.3.1
access-group acl_dmz in interface dmz
I've tried this static with a few different access-list but still couldn't get the traffic to use the static.
What I ended up doing to get it working was creating a static like this:
static(inside,dmz) 192.168.114.0 192.168.114.0 netmask 255.255.255.255
access-list acl_dmz permit tcp 10.61.3.0 255.255.255.0 host 192.168.114.5
access-group acl_dmz in interface dmz
Is this the correct way of doing it or is there a better way ?
Thanks
