RE: To NAT or not to NAT in the DMZ, that is the question.

[Michael Nelson]

If you mean like --

<Internet Router>-<Firewall>
                      |
                      +-------- <DMZ>
                      |
                      +-------- <Inside>

Yes.

-mike


On Tue, 20 Feb 2001, Joseph Bannon wrote:

> > The higher sec levels can communicate to lower sec levels using their
> > untranslated addresses by doing something like the following:
> >
> > static (inside,dmz) 172.16.0.0 172.16.0.0 netmask 255.255.0.0 0 0
>
> So this will allow me to only use one router?

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]