static impossible

lyes.ouarti · ‎10-01-2007

hello *;

i have two ironport in my network, i would like to load balence between them using BIGIP,( until here i mannaged to do it).

we have created two MX record with the seme priority, and we would like to publish the virtual ip of the BIGIP (wich does the load balancing between the tow iroport) but the pix refuse to static different public with the same private ip, (duplicate static error message).

any idea?

thx.

gfullage · ‎10-02-2007

You can't do this, the PIX/ASA/FWSM will not allow one IP address to map to two different ones. Think about the return traffic, how is the firewall supposed to know which IP address to map it back to on the return path, when it will find two possibilities.