How Do I do to connect a server at DMZ and post it with an public IP

dirodiro
dirodiro Posts: 6
First Comment First Anniversary
in Security

I configured my dmz sub net 10.10.10.0/255.255.255.0
the dmz ip is 10.10.10.1
i have connected a server 10.10.10.2
i have tested some routes and they have worked….,
but I need to assign a Public IP to the server and access it from out of the office, includding ports as: ftp, rdp, http, y sql, Please if you can help me, thank you

All Replies

  • PeterUK
    PeterUK Posts: 3,456  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    Well theirs a way to have the server have the real WAN IP even if you have one but for a simple setup the USG has your WAN IP and you can make NAT rule that are Virtual Server for the ports to your DMZ LAN server IP

  • dirodiro
    dirodiro Posts: 6
    First Comment First Anniversary

    in fact, in this case, the WAN ip is different to the Server on DMZ, .. I already made NAT with external ip as the public and internal 10.10.10.2, I already made the policy with from, to and destination (my server)

    and it does not work yet

  • WJS
    WJS Posts: 156  Master Member
    5 Answers First Comment Friend Collector Third Anniversary

    Sounds like you have public IP on DMZ.

    Try to change type if you use pre-defined DMZ name.

    Router(config)# interface dmz
    Router(config-if-dmz)#type external

    And exit, save .

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）