Cisco 5510 Getting Started Guide - Page 84

Example DMZ Network Topology Chapter 8 Scenario: DMZ Configuration Figure 8-1 Network Layout for DMZ Configuration Scenario www.example.com Internet Public IP Address 209.165.200.225 (outside interface) Inside interface 192.168.1.1 Inside DMZ interface 10.30.30.1 DMZ 191634 User 192.168.1.2 Web Server Private IP Address: 10.30.30.30 Public IP Address: 209.165.200.225 This example scenario has the following characteristics: • The web server is on the DMZ interface of the adaptive security appliance. • Clients on the inside network can access the web server in the DMZ and can also communicate with devices on the Internet. • Clients on the Internet are permitted HTTP access to the DMZ web server; all other traffic coming from the Internet is denied. • The network has one IP address that is publicly available: the outside interface of the adaptive security appliance (209.165.200.225). This public address is shared by the adaptive security appliance and the DMZ web server. Cisco ASA 5500 Series Getting Started Guide 8-2 78-19186-01