how to nat internal address to dmz

[ilpadrino]

Hi, I would like to give LAN access to a web server on the DMZ. We have a webserver on the LAN with ip 192.168.20.199, and we want to move it to the DMZ. The DMZ is subnet 192.168.70.0. Can we create a NAT so that the 192.168.20.199 address still works once the server is in the DMZ with a 192.168.70.199 address?

I used this command, but it didn't work:

static (inside,dmz) 192.168.70.199 192.168.20.199 netmask 255.255.255.255

Thanks

 

[ilpadrino]

one other note..we already have a static mapping to the external which is working. i believe what i'm trying to accomplish is called reverse or bi-directional nat, but i just can't access from the inside address.

 

[brianinms]

If your internal network is 192.168.20.x than the answer is no you can not. The webserver would appear to be on the local subnet and the workstations wouldn't send the packets to their default gateway.