dmz

[carl_townshend]

we have a vlan here , I have set this up for the dmz, my question is what config on the router do I need to do, I want all my internal clients to access the e-mail and isa server but only e-mail and internet traffic from outside to come in ?

thanks guys

[arvindchari]

Hey carl

What youre looking at is creating a Static NAT entry for the addresses coming in from the internet

I think the URL below will give you a good idea of what kind of a configuration you are looking at on the router.

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_configuration_example09186a0080094111.shtml

HTH

[carl_townshend]

hi my router only has 2 ethernet ports ? 1 can plug into my vlan on my switches

[arvindchari]

you could create ethernet sub interfaces on the router interface to accomplish intervlan routing as well as the communication with the dmz

[carl_townshend]

if I created a sub interface, would I then just put an access list on that sub interface, can anyone tell me what kind of acl I would use in this situation ?