inside to DMZ web server via Private(real) IP or Public IP.

[dannyyo]

I have an issue of not being able to access the DMZ web server using the public IP. I can get to it using the private(real) IP, but not the public IP. However from the outside I can use the public IP to get to it. So I discovered that I can issue the command:

static (DMZ,inside) x.x.x.50 i.i.i.10 netmask 255.255.255.255

this will make it work. But now I can't get to the DMZ web server from inside using the private IP.

Basically, this

http://www.tek-tips.com/faqs.cfm?fid=6266

is the same issue. Although the solution fixes one issue, but breaks the other.

I called cisco tac and they told me that I have to chose one and can't have both. Is this right? Not that I doubt TAC. I just want to confirm that everyone agrees with this.

 

[desperado618]

The alias command was created for that purpose.
I an not infront of an ASA right now but the syntax is something like:
alias (inside) <public_ip> <private_ip>

http://www.NetLeets.com

IT Security news and information
In plain English