Cisco 5510 - ASA SSL / IPsec VPN Edition Getting Started Guide

Chapter 8 Scenario: DMZ Configuration
Example DMZ Network Topology
8-2
Cisco ASA 5500 Series Getting Started Guide
78-19186-01
Figure 8-1 Network Layout for DMZ Configuration Scenario
This example scenario has the following characteristics:
• The web server is on the DMZ interface of the adaptive security appliance.
• Clients on the inside network can access the web server in the DMZ and can
also communicate with devices on the Internet.
• Clients on the Internet are permitted HTTP access to the DMZ web server; all
other traffic coming from the Internet is denied.
• The network has one IP address that is publicly available: the outside
interface of the adaptive security appliance (209.165.200.225). This public
address is shared by the adaptive security appliance and the DMZ web server.
User
192.168.1.2
Inside
DMZ
191634
www.example.com
Internet
Public IP Address
209.165.200.225
(outside interface)
Inside interface
192.168.1.1
DMZ interface
10.30.30.1
Web Server
Private IP Address: 10.30.30.30
Public IP Address: 209.165.200.225

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English