Forum Discussion

scott_h_ryan_82's avatar
scott_h_ryan_82
Icon for Nimbostratus rankNimbostratus
Mar 31, 2009

regarding viirtual server config/design

Here's what I'm trying to do...     Traffic on vlan 100 is dmz traffic. I want that traffic to go through the firewall before talking to servers on vlan 50 (internal). The server gateways ...
config
design
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Apr 01, 2009
The traffic will follow a) the last-hop table (if auto-last-hop is enabled), then b) the routing table. The virtual server settings allow the traffic specified in their configuration to flow, sort of like an access list.

 

 

If you want to ensure the DMZ servers hit the firewall, you may need to establish double nats for the internal servers on the firewall.