Cisco ASA 5505 Getting Started Manual page 59

Chapter 6 Scenario: DMZ Configuration
Figure 6-3 An Inside User Visits an Internet Web Server
Source Address Translation
192.168.1.2
78-18003-02
www.example.com
209.165.201.225
Inside interface
192.168.1.1
Inside
User
192.168.1.2
When an inside user requests an HTTP page from a web server on the Internet,
data moves through the adaptive security appliance as follows:
The user on the inside network requests a web page from www.example.com.
1.
The adaptive security appliance receives the packet and, because it is a new
2.
session, verifies that the packet is allowed.
The adaptive security appliance performs network address translation (NAT)
3.
to translate the local source address (192.168.1.2) to the public address of the
outside interface (209.165.200.225).
Internet
Public IP Address
209.165.200.225
(outside interface)
DMZ interface
10.30.30.1
Web Server
Private IP Address: 10.30.30.30
Public IP Address: 209.165.200.225
ASA 5505 Getting Started Guide
Example DMZ Network Topology
DMZ
6-5