Cisco Question

[mrdelite29]

We have an application that needs to run on it's own dmz. The pix firewall we have does not have a dedicated dmz port and mapping external/internal address does not work with this application. We have more than enough available ip addresses in our range to use and our application resides on a box that can act as a gateway as well.

Our network is as follows

Adtrans to Pixfirewall to switch

is it possible to have the network set up like this?

Adtrans to switch to pixfirewall/application gateway to switch? Giving the application gateway one of the ip addresses from our range? Sort of like how some cable internet providers assign ip addresses to two seperate computers without the aid of a router inside the cable modem.

 

[brianinms]

Mapping an external address to an internal address surely works with that machine. In my 10 years of configuring various firewalls I have yet to come across any server/workstation/network device that failed to work with a static mapping.