Joining a workgroup on a different DMZ

[bz]

Is it possible to join a workgroup on a different DMZ (from higher to lower security)? If can, how? Thanks in advance!

[daipayan_b]

Hi,

yes it is possible, create the access-list permiting the netbios over tcp requests to be allowed in from the DMZ interface .

like...

access-list 10 permit permit tcp any any eq 139

access-list 10 permit permit udp any any eq 138

access-list 10 permit permit udp any any eq 137

If you have a domain server in DMZ then you, in place of "any" give the domain servers ip only.

hope this helps.