Contact US

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Security, hacker detection & forensics FAQ

Pix Hints and Tricks

I can't access my DMZ server via its OUTSIDE address - ALIAS / NAT OUTSIDE? by F1lby
Posted: 28 Mar 06 (Edited 28 Mar 06)


I have a LAN with lots of PCs which can access the INTERNET (INSIDE)
I have a web server on the DMZ ( which is translated to on the OUTSIDE

The WORLD can access with NO problems

The INSIDE machines can access no with no problems.
The INSIDE machines CANNOT access

So what we`re saying here, is that the INSIDE cannot access a DMZ host that is translated to the OUTSIDE interface.

We need to find a way of getting machines to access by performing a translation, so that internal machines connecting to are in fact redirected to


In Pix version earlier than 7.0 use the ALIAS command

ALIAS (inside)


ALIAS (inside) xx.xx.xx.xx  ii.ii.ii.ii
Where xx.xx.xx.xx is the EXTERNAL address  and ii.ii.ii.ii  is the address on the DMZ

In version 7.0 the ALIAS command was depreciated - while it still works OK in Version 7.0, Cisco ASDM doesn`t support the ALIAS command

In PIX 7.0 upwards we will use a STATIC command instead

STATIC (dmz,inside)  netmask


STATIC (dmz,inside)  xx.xx.xx.xx  ii.ii.ii.ii  netmask
Where xx.xx.xx.xx is the EXTERNAL address  and ii.ii.ii.ii  is the address on the DMZ

Back to Security, hacker detection & forensics FAQ Index
Back to Security, hacker detection & forensics Forum

My Archive

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close