Inside Local to Inside Global Conversation

[bpascaluottawa]

Hi All,

     I have a clients that has 2 Servers in our DMZ, one Web Server and on CMS Server. The Web server needs to be able to talk to the CMS servers Inside Global IP. So,

     Web Server =  Local Inside 10.10.10.10, Local Global 172.20.0.10

     CMS Server = Local Inside 10.10.10.11, Local Global 172.20.0.11

     I'm just puzzled with this, it should not work, right? And it doesn't work.

     So basically, The Web Server send it's packet to it's default gateway(Pix525). The Pix receives that packets (S=10.10.10.10,D=172.20.0.11), NATs it (S=172.20.0.10, D=172.20.0.11) or will it drop it or will it send it directly to 10.10.10.11 without nating it ?

     Thanks

Pascal Belanger

[Shiva Prasad]

Outside nat is what you are looking for if the pix is running 7.x code if 6.3 then search for alias command usage.

Regards,

Shiva