Networks

Ask something
Discussion Locked

Cisco ASA DMZ Configuration

0 helpful
1 reply

by karmcsa

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi All,

I have configured a webserver in DMZ in our cisco asa 5510 series.

The problem I am facing is from the web server I am not able to access the internet rest everything is working fine.

The below is my configuration.
webserver IP : 192.168.88.90
Interface:

OUTSIDE Our static IP
Inside 192.168.99.0
dmz 192.168.88.0

static (INSIDE,DMZ) 192.168.99.0 192.168.99.0 netmask 255.255.255.0

access-list ntldmz extended permit tcp host 192.168.88.90 any eq www

access-group ntldmz in interface DMZ
acess-group 120 in interface outside
static (DMZ,OUTSIDE) x.x.x.x 192.168.88.90 netmask 255.255.255.255

access-list 120 extended permit tcp any host x.x.x.x eq www

1 reply

by netman1958

Using this access-list:
access-list ntldmz extended permit tcp host 192.168.88.90 any eq www

The only port your webserver can send through the ASA is 80. If the DNS server is on a different segment than the web server the it won't be able to resolve any names.

Try this:
access-list ntldmz extended permit tcp host 192.168.88.90 any

This discussion is closed to new replies.