Should I have to use:
global (DMZ) 2 interface
nat (inside) 2 10.3.0.0 255.255.0.0
Instead of: [code:1]
global (DMZ) 1 interface
nat (inside) 1 10.3.0.0 255.255.0.0
I already have a set numbered 1 for traffic outside of the outside interface. Do those numbers have to be unique to each set?
Also, I have a static command that allows traffic from the inside network to the DMZ. Do I need the global command also?
static (inside,DMZ) 10.3.3.0 10.3.3.0 netmask 255.255.255.0
I thought this code was translating the 10.3.3.0 network to 10.3.3.0 on the DMZ. Is this incorrect?
Re: Problem with DMZ nat?
11 years 3 weeks ago #22585
After researching more and testing other configs it came to me that I only have a static command for the 10.3.3.0 subnet and not the subnet that my servers are in. I added a new static translation for that network and everything works. This is without the added global/nat command you asked me to use.