i have a design question. I am sure there are many ways to skin this cat but what i have is a hardware 3002 client connecting to a central site (172.16.x.x). That site provides my internal users with a telnet application and some citrix traffic. Since all of the traffic coming from that site is over the vpn tunnel i shouldn't have to worry about it to much. (i would think). I am stuck with the correct acl or static statement to use. This is what i have so far.
access-list acl_dmz_in line 1 permit ip 172.16.x.x 255.255.255.0 10.x.x.0 255.255.255.0
avoid nat translations
static (inside,dmz) 10.x.x.0 10.x.x.0 netmask 255.255.255.0
Will this work or am i way off here? Thanks for any help.
access-list acl_dmz_in line 1 permit ip 172.16.x.x 255.255.255.0 10.x.x.0 255.255.255.0
avoid nat translations
static (inside,dmz) 10.x.x.0 10.x.x.0 netmask 255.255.255.0
Will this work or am i way off here? Thanks for any help.