Como permitir a rede INSIDE acessar site hospedado em servidor web na DMZ ?

[Davi Matos]

FIREWALL
en
Password: null
conf t
hostname FIREWALL

enable password cisco

Username cisco password cisco

domain-name cisco.br

Wr mem

Int gig1/1
No shut

Nameif INSIDE

Security-level 100

Ip add 10.20.30.1 255.255.255.252
Exit

Int gig1/2
No shut

Nameif DMZ
Security-level 70

Ip add 10.10.10.1 255.255.255.240
Exit

Int gig1/3
No shut

Nameif OUTSIDE
Security-level 0

Ip add 197.100.50.2 255.255.255.252

Wr mem

Router ospf 35 
Router-id 1.1.3.3
Network 10.20.30.0 255.255.252 area 0
Netowork 10.10.10.0 255.255.255.240 area
Network 197.100.50.0 255.255.255.252 area 0
Exit

Wr mem

Object network INSIDE-OUT
Subnet 192.168.0.0 255.255.255.0

nat (INSIDE, OUTSIDE) dynamic interface
Exit

Conf t
Object network INSIDE-OUT2
subnet 10.10.0.0 255.255.0.0
nat (INSIDE, OUTSIDE) dynamic interface
Exit

Conf t
Object network INSIDE-OUT3
subnet 10.10.10.0 255.255.255.240
nat (DMZ, OUTSIDE) dynamic interface
Exit

Wr mem

Conf t
Route OUTSIDE 0.0.0.0 0.0.0.0 197.100.50.1

Access-list INSIDE-DMZ extended permit icmp any any

Access-list INSIDE-DMZ extended permit udp any any eq 67

Access-list INSIDE-DMZ extended permit udp any any eq 68

Access-list INSIDE-DMZ extended permit udp any any eq 69

Access-list INSIDE-DMZ extended permit udp any any eq 53

Access-list INSIDE-DMZ extended permit tcp any any eq 20

Access-list INSIDE-DMZ extended permit tcp any any eq 21

Access-list INSIDE-DMZ extended permit tcp any any eq 53

Access-list INSIDE-DMZ extended permit tcp any any eq 80

Access-list INSIDE-DMZ extended permit tcp any any eq 8080

Access-list INSIDE-DMZ extended permit tcp any any eq 443

Access-list INSIDE-DMZ extended permit tcp any any eq 8443

access-group INSIDE-DMZ out interface DMZ

Wr mem

sh start

no access-group INSIDE-DMZ out interface DMZ

no access-group INSIDE-DMZ out interface DMZ

access-group INSIDE-DMZ in interface DMZ

Wr mem

access-list INSIDE-OUTSIDE permit icmp any any

access-list INSIDE-OUTSIDE permit tcp any any eq 80

access-list INSIDE-OUTSIDE permit tcp any any eq 8080

access-list INSIDE-OUTSIDE permit tcp any any eq 443

access-list INSIDE-OUTSIDE permit tcp any any eq 8443

Access-group INSIDE-OUTSIDE in interface OUTSIDE

Wr mem

 

 

Só o protocolo ICMP está funcionando...