Ploblems with dmz-outside (webpage). pix
Remove this line:
static (DMZ,INSIDE) 10.10.0.0 10.10.0.0 netmask 255.255.255.0
You don't need a translation going from a lower security level to a higher one. You will also need a nat line for the dmz so that pc's on the dmz will be translated outbound. The only connection that will work on the dmz is the webserver when he's sending traffic outbound with a source port of 80. Something like:
nat (DMZ) 101 10.10.0.0 255.255.255.0
Other than that, it looks like it should be working. You've got permission, a route, and a translation. Maybe "clear local-host 10.10.0.2" to get rid of any bad xlates and try again. Check debg level syslogs, run packet captures, "clear asp drop" then "show asp drop" after an attempt?
×