12-04-2008 11:36 AM - edited 03-11-2019 07:21 AM
Is it possible to make a static nat with 3 public ip address on the outside interface of the asa to the same internal ip address on the inside side?
12-04-2008 12:45 PM
What are you trying to achieve by doing this?
Usually you would want to map one external IP address to multiple internal IP's
12-04-2008 12:48 PM
The old firewall is working like this, and I will upgrade to ASA. So I must do this in one way there should be a workaround...
12-04-2008 02:00 PM
Hi,
I dont think it is possible to configure multiple public IP Address to the same internal IP Address.
One option might be, to do something like the below configuration provided you want the users to use different public ip address for different services.
static (inside,outside) tcp 172.16.1.1 telnet 192.168.1.1 telnet netmask 255.255.255.255
static (inside,outside) tcp 172.16.1.2 www 192.168.1.1 www netmask 255.255.255.255
static (inside,outside) tcp 172.16.1.3 https 192.168.1.1 https netmask 255.255.255.255
Regards,
Arul
*Pls rate if it helps*
12-07-2008 05:18 PM
To map multiple global addresses to a single local, you want policy nat:
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807d2874.shtml
--Matt
12-08-2008 05:18 AM
Is it possible to make a static nat with 3 public ip address on the outside interface of the asa to the same internal ip address on the inside side?
Of course it is possible by using a technique called Policy NAT, the link provided by Matt can give example.
Have a look in this thread for another example I tested for someone a while back that had same same requirements.
Rgds
Jorge
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: