Cisco QuickVPN - PC Administration Manual page 72

Networking
Configuring a DMZ
Cisco SA 500 Series Security Appliances Administration Guide
Figure 7 Example DMZ with Two Public IP Addresses
Public IP Addresses
209.165.200.225 (router)
209.165.200.226 (web server)
SA 500
LAN Interface
192.168.75.1
User
192.168.75.10
In this scenario, the ISP has supplied two static IP addresses: 209. 1 65.200.225 and
209. 1 65.200.226. The address 209. 1 65.200.225 is used for the router's public IP
address. The administrator configures the Optional port to be used as a DMZ port
and created a firewall rule to allow inbound HTTP traffic to the web server at
172. 1 6.2.30. The firewall rule specifies an external IP address of 209. 1 65.200.226.
Internet users can enter the domain name that is associated with the IP address
209. 1 65.200.226, and they are connected to the web server.
www.example.com
Internet
DMZ interface
172.16.2.1
User
192.168.75.11
Source Address Translation
209.165.200.226
Web Server
Private IP Address: 172.16.2.30
Public IP Address: 209.165.200.226
3
172.16.2.30
72