Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have a scenerio, my outside and inside network are connected via inside interface of my firewall pix. And dmz is connected via dmz. Inside has security level 100 and dmz has 40,from dmz i can access inside lan, but not able to access internet. KIn...
i can check that, but for that i will need down time... as some connection will also drop.. second thing.... for traffic from lower to higher security level, dont we need static nat. ......
static (dmz,inside) 10.0.0.0 10.1.1.1 netmask 255.255.255.255This is becoz..dmz and inside are using approx same kind of ip range means.. 10.*.*becoz of this command access from dmz to inside is possible, but not towards internet......In my firewall ...
but i dont have any outside interface configured.....Outside- router---inside --firewall---dmz.Outside and inside are on same side of firewall...this config :global (outside) 1 interfacenat (inside) 1 0.0.0.0 0.0.0.0nat (dmz) 1 0.0.0.0 0.0.0.0I thnk ...
Pointnat (inside) 0 access-list inside_nat0_outboundaccess-list inside_nat0_outbound extended permit ip host 1.1.1.1 10.6.25.0 255.255.255.0Means Source 1.1.1.1 to 10.6.25.0 ( no nat)But it is givcen like this :static (outside,inside) 10.6.25.2 192.1...
