Access via NAT

[kbullard00]

DMZ can access the Internet.

However, It states that clients from the Internet can not access the DMZ.

Why?

thx

[cadet alain]

Hi,

you need static nat or pat.

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080094831.shtml

Regards.

Alain.

[dbass]

And likely an ACE that permits traffic.  Is this thru an ASA or a router?  Is the an ACL applied to the external interface?  It seems like your outbound NAT works correct, but you either are not doing a static nat or port forwarding, and/or not permitting the traffic to be initiated from the outside.