Advertisement
Step 3: Configure External Identity for the DMZ Web Server
The DMZ web server needs to be easily accessible by all hosts on the Internet. This configuration
requires translating the web server IP address so that it appears to be located on the Internet, enabling
outside HTTP clients to access it unaware of the security appliance. Complete the following steps to
map the web server IP address (30.30.30.30) statically to a public IP address (209.165.156.11):
1. Click the Configuration button at the top of the ASDM window. Then choose the NAT feature on
the left side of the ASDM window.
2. Click the Translation Rules radio button. Then click the Add button at the right side of the page.
3. Choose the outside dmz interface from the drop-down menu of interfaces.
4. Enter the IP address (30.30.30.30) of the web server, or click the Browse button to select the server.
5. Choose 255.255.255.255 from the Mask drop-down menu. Then click the Static radio button.
6. Enter the external IP address (209.165.156.11) for the web server. The Advanced button allows
you to configure features such as limiting the number of connections per static entry and DNS
rewrites. Then click the OK button.
7. Verify the values that you entered. Then click the Apply
The configuration should display as follows:
button .
15
Advertisement
