Networking
Configuring the DMZ
Cisco ISA500 Series Integrated Security Appliance Administrator Guide
125
4
HTTP traffic to the web server at 172.16.2.30. The firewall rule specifies an
external IP address of 209.165.200.226. Internet users enter the domain name that
is associated with the IP address 209.165.200.226 and can then connect to the
web server.
STEP 1
Click
Networking -> DMZ
.
The DMZ window opens.
STEP 2
To add a DMZ, click
Add
.
Other options:
To edit an entry, click
Edit
. To delete an entry, click
Delete
.
After you click Add or Edit, the DMZ - Add/Edit window opens.
STEP 3
In the
Basic Setting
tab, enter the following information:
•
Name:
Enter the name for the DMZ.
•
IP Address:
Enter the subnet IP address for the DMZ.
•
Netmask:
Enter the subnet mask for the DMZ.
•
Spanning Tree:
Check the box to enable the Spanning Tree feature to
determine if there are loops in the network topology.
•
Port:
Specify a configurable port as a DMZ port. The traffic through the DMZ
port is directed to the DMZ. All available configurable ports appears in the
Port
list, choose a port and click
->Access
to add it to the
Member
list. The
selected configurable port will be set to a DMZ port with Access mode. All
data going into and out of the Access port is untagged.
NOTE
This setting will change the port type and access mode of the
selected configurable port. Changing the port type will wipe out all
configurations relative to the physical port.
NOTE
Up to five DMZ interfaces can be configured for ISA570 and
ISA570W. Up to four DMZ interfaces can be configured for ISA550
and ISA550W.
•
Zone:
Choose the default or custom DMZ zone to which the DMZ is mapped.
