Inside PCs could not browse Webserver in DMZ 1

[wstran]

Greetings,

Our problem is that all PCs in the PIX's inside area (192.168.1.xxx) could not access to the web pages of the web server (192.168.2.3) located in dmz area. BTW, the web server was NAT'ed to the outside and can be seen by any one from outside. Please advise, thanks!

 

[dopehead]

You could do :

access-list nonat permit ip 192.168.1.0 255.255.255.0 host 192.168.2.3

nat (inside) 0 access-list nonat

This will tell the pix what to do with the traffic from inside to the server in the dmz, in this case it is not nat'ed.


Network Systems Engineer
CCNA/CQS/CCSP/Infosec

 

[wstran]

Thanks very much, Dopehead. It worked right after I entered your suggested solution.