Hi Jay,
Thanx for the reply.
We are not looking at VPN solution.
As the business partner will come over private leased line and not thru internet.
Our requirement is to allow business partners (Many Banks) to access few of our servers in DMZ and Inside network in a secured manner.
Banks network will come over wan and in our premises we will get a ethernet from all the banks.
what we are planning is to terminate all the ethernet coming from different banks on a L3 switch in different vlan interface.
Purpose of creating vlans on the L3 is to control the traffic (Inter-vlan) coming from different banks and filtering the traffic at the L3 only.
secondly we will have the L3 connected to PIX interface facing the Bank-Zone as shown in the proposed topology attached.
We will create a static NAT between Bank-Zone interface subnet and various servers in DMZ and Internal network.
Subsequently we will allow the services for specific IP's only.
This way we will hide our inside+dmz private ip to be seen by bank network, as the bank clients will connect to the natted ip for accessing servers in DMZ and inside lan.
Kindly suggest if this is OK from security perspective or do we need to add any component.
