MMIS Exchange in DMZ?

[b166er]

Hi I am new to the site and to Security.
I am CCNP, not saying that it means all that much, but I am pretty familiar with just about all I have dealt with up till now.

I got the PIX up and running doing PAT from inside and no configured DMZ.
I have an Exchange 2000 server on the inside interface as well as an MMIS server.
My problem is, I would like for all of my internal users to be able to sync with the MMIS server (which is also internal being nat'ted to a public IP).

In other words, I would like to be able to set all of my Mobile devices to sync to the public IP of the MMIS server, internally and externally, but there is a configuration i am missing that will allow internal devices to directly connect with external IPs that are being nat'ted.

Let me know if you need more data.

--JoeR

 

[tbissett]

If I understand what you're trying to do correctly, I believe your answer will lie in the "alias" command. Here's a doc that explains what it does:

http://www.cisco.com/warp/public/110/alias.html

 

[b166er]

I gave the DNAT feature of that last night, as I am using an internal DNS server, but it didn't work. I didn't turn proxy arp off for the same reason.
alias (inside) 207.168.61.15 192.168.1.6 255.255.255.255

Will alias log to the ASA with an xlate or a conn?

In other words, will i be able to see it with the show xlate or show conn, or is there another command that I can use to watch the firewalls efforts to reroute the destination?

--JoeR

 

[yizhar]

HI.

> I can use to watch the firewalls efforts to reroute the destination?
The pix will not reroute. That's the problem here.

There are several possible solutions.

Since you probably already have an internal DNS server, then the best solution is to configure internal DNS with the needed record(s) that will point clients to the internal IP when looking for the MMIS server.
When the client is "outside", it will use external DNS servers and will get the public IP address.

The alias command is not a good solution for your scenario.

Bye


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar