ASA DMZ with multiple Servers

[cmadiam82]

Hi all!

we are planning to use the ASA 5510 to host our servers to be accessed from internet. We have six servers (i included network drwing for this one..hehehe), unfortunately we only have one public ip address. How can i configure the ASA to be able to hosts this servers and can be accessed outside? Can you please give me a link or what so ever that i can use to?

thanks in advances guru's!!!

[Jon Marshall]

Hi

Can't open the visio so apologies if i have misunderstood.

If the servers are accessed on the same port you can't do this ie. you will need to have 6 separate ip addresses. However if the servers are all accessed on different ports you can do port forwarding eg.

static (inside,outside) tcp "public IP" 23 172.16.5.1 23 netmask 255.255.255.255

static (inside,outside) tcp "public IP" 80 172.16.5.2 80 netmask 255.255.255.255

etc....

where 172.16.5.1 and 172.16.5.2 are servers in your DMZ.

If the public IP address in the above static commands is your ASA outside interface substitute the "public IP" with "interface" eg.

static (inside,outside) tcp interface 23 172.16.5.1 23 netmask 255.255.255.255

Obviously you then need to configure access-lists etc. to allow the access.

HTH

Jon

[cmadiam82]

Tnx Jon. I will give it a try.