3 interfaces

[khaledeshah]

Hi
I have a PIX515 & I put servers with private addreses behind PIX & make static commands to let outside clients in.
Now how can I let my LAN on the inside interface use those servers.
thks

 

[yizhar]

HI.

The servers are in DMZ, right?

You need a "global" statement bound to the dmz interface.

You will also need to handle name resolution, this depends on the services you run on those servers.
The best method to handle DNS to point to private addresses is to use internal DNS server(s) and manually add entries for internal servers behind the pix.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[khaledeshah]

hi
Thks for ur reply, but u said that I need global to dmz interface, Do you mean like this global (dmz) 1 10.0.0.100-10.0.200 coz I done this but It does nothing.

 

[yizhar]

HI.

Post here a more detailed config so we can look.

The internal clients should use internal ip addresses of the dmz servers to access them, unless you use other technique.

You also need to have "nat (inside) 1 ..." for this.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar