Skip navigation.
Home

Cisco PIX DMZ Configuration

Guys, I'm at a loss. I have tried everything I could think of and find posted to merely connect a server in my DMZ to the outside world.

What I want to do is to be able to Remote Desktop into a box in the DMZ.

Here is my configuration. (real external ip changed)
PIX Version 6.3(5)

nameif ethernet0 outside security0
nameif ethernet1 inside security100
nameif ethernet2 dmz security50

access-list out permit tcp any host 1.1.1.1 eq 3389

ip address outside 1.1.1.x 255.255.255.192
ip address inside 10.1.0.1 255.255.0.0
ip address dmz 172.16.1.1 255.255.255.0

global (outside) 1 1.1.1.x
global (outside) 1 interface

nat (inside) 0 access-list 100
nat (inside) 1 0.0.0.0 0.0.0.0 0 0

static (dmz,outside) 1.1.1.1 172.16.1.56 netmask 255.255.255.255 0 0

access-group out in interface outside

I get hit counts on the 3389 access-list entry but the traffic never seems to actually hit the statically mapped server sitting on 172.16.1.56

Other statically mapped servers from inside,outside work just fine. This is my only server in the dmz but I can't get it to respond.

Any ideas? To me the configuration looks correct but its just not working.

got it

never mind fellas - it was related to my two global commands...

Search



 

Web

www.secmanager.com