An Inside User Visits A Web Server On The Internet; Chapter 8 Scenario: Dmz Configuration - Cisco 5510 - ASA SSL / IPsec VPN Edition Getting Started Manual

Chapter 8 Scenario: DMZ Configuration

An Inside User Visits a Web Server on the Internet

78-19186-01
This section includes the following topics:
An Inside User Visits a Web Server on the Internet, page 8-3
•
An Internet User Visits the DMZ Web Server, page 8-4
•
An Inside User Visits the DMZ Web Server, page 8-6
•
Figure 8-2 shows the traffic flow through the adaptive security appliance when an
inside user requests an HTTP page from a web server on the Internet.
Figure 8-2 An Inside User Visits an Internet Web Server
Source Address Translation
192.168.1.2 209.165.200.225
Inside interface
192.168.1.1
Inside
User
192.168.1.2
www.example.com
Internet
Public IP Address
209.165.200.225
(outside interface)
DMZ interface
10.30.30.1
Web Server
Private IP Address: 10.30.30.30
Public IP Address: 209.165.200.225
Cisco ASA 5500 Series Getting Started Guide
Example DMZ Network Topology
DMZ
8-3