Hi I have a radius server which I

[khaledeshah]

Hi
I have a radius server which I want to put it behind DMZ1 interface of PIX515 with private IP eg 192.168.1.16 with static command to let RAS clients connect with it
static (dmz1,outside) realaddress 192.168.1.16 netmask 255.255.255.255
access-list acl_out permit tcp any host realaddress eq radius
also I have sql server which will auth. , and I want to put behind the inside interface with private address eg 10.0.0.15 , so how can I let the radius make auth with sql server & connect to it.

 

[yizhar]

HI.

If the SQL server is going to be dedicated to servicing the RADIUS server, I suggest placing it beside the RADIUS server on the same subnet (same pix interface).

What do you think?
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[khaledeshah]

Thks for ur reply, but that interface is accessible by outside users & the inside interface not.

 

[yizhar]

HI.

You can allow SQL access from DMZ ot inside in the same way that you allow RADIUS from outside:

static (inside,dmz1) ....
access-list fromdmz1 permit tcp host ... host ... eq 1433
access-list fromdmz1 in interface dmz1

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[khaledeshah]

Tks for ur reply :
u mean I do like this :
static (inside,dmz1) 192.168.1.16 10.0.0.15 netmask 255.255.255.255
where 192.168.1.15 address of radius & 10.0.0.16 address of SQL
access-list fromdmz1 permit tcp host 192.168.1.16 host 10.0.0.15 eq 1433
access-group fromdmz1 in interface dmz1
is this correct ?

 

[yizhar]

HI.

Almost correct, just change this line:
> access-list fromdmz1 permit tcp host 192.168.1.16 host 10.0.0.15 eq 1433

To this:
access-list fromdmz1 permit tcp host 192.168.1.15 host 192.168.1.16 eq 1433

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar