help with hairpinning

Unanswered Question
May 7th, 2007
User Badges:

I'm using ASA5520 with 7.2

Inside Interface

Outside Interface

With hairpinning enabled, I can access webservers from the inside of the network using their public IPs that are natted back to the inside. This works great right now.

My ISP gave me a second Public IP block to add to my existing Public network, call it

How do I allow the new network to be also hairpinned?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
acomiskey Tue, 05/08/2007 - 07:55
User Badges:
  • Green, 3000 points or more

You should only have to add an additional static statements for the new servers addresses. Your existing hairpin probably looks like this...

static (inside,outside) 111.111.111.x 192.168.0.x netmask

static (inside,inside) 111.111.111.x 192.168.0.x netmask

New network hairpin...

static (inside,outside) 222.222.222.y 192.168.0.y netmask

static (inside,inside) 222.222.222.y 192.168.0.y netmask


This Discussion