I have a websever set up on a DMZ and a database server that is set up on another subnet. I need to allow access to the database from the webserver but not open the port to the internet. Lets say the webserver is and the database server is I need to open port 3053 from the webserver to the database sever. Im using an NSA2600 with updated firmware. Any help would be greatly appreciated. Ive dealt with the NSA series a lot but have never had to open ports to other subnets on it. TIA

  • Do the servers reach each other now? Seems that you are working with different zones in a firewall. If so, you will need to create an extended ACL, that allows only TCP/UDP desired port and apply it to the interzone configuration – Antonio Perez Oseguera Dec 20 '16 at 15:35
  • No they do not currently communicate, but you are correct.The Database Server is on X0 and the Web Server is on X3 – Jesse R Dec 20 '16 at 16:22
  • I tried to create the ACL between the 2 ports with no luck. I know its something simple I am missing just unsure what. – Jesse R Dec 20 '16 at 16:42
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer. – Ron Maupin Aug 15 '17 at 17:03

Jesse, the task should not be very difficult. Your issue may be the order of operation. Firewall rules are prioritized and the order of statements is significant. Also, statements are applied in one direction so you will need to account for egress as well as ingress packets. Hope that helps.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.