Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

Dual ISP's and Dual NAT statements inbound fails

Can this be done? I have a Webserver and another server on the inside on two different Vlans and I want them to be accessible from both ISP links inbound. I keep getting the following message:

Here is what I have for the first two and it works.

static (VLAN3,Outside1) 63.139.165.45 192.168.175.85 netmask 255.255.255.255 dns

static (VLAN3,Outside0) 66.209.123.13 192.168.175.85 netmask 255.255.255.255 dns

when I add these two - it gives the message at the bottom

static (VLAN2,Outside1) 63.139.165.45 192.168.170.85 netmask 255.255.255.255 dns

static (VLAN2,Outside0) 66.209.123.13 192.168.170.85 netmask 255.255.255.255 dns

WARNING: mapped-address conflict with existing static

VLAN3:192.168.175.85 to Outside1:63.139.165.45 netmask 255.255.255.255

WARNING: mapped-address conflict with existing static

VLAN3:192.168.175.85 to Outside0:66.209.123.13 netmask 255.255.255.255

4 REPLIES
New Member

Re: Dual ISP's and Dual NAT statements inbound fails

This doesnt work either - Any Ideas?

static (VLAN3,Outside1) tcp 63.139.165.45 www 192.168.175.85 www netmask 255.255.255.255 dns

static (VLAN3,Outside0) tcp 66.209.123.13 https 192.168.175.85 https netmask 255.255.255.255 dns

static (VLAN2,Outside1) tcp 63.139.165.45 www 192.168.170.85 www netmask 255.255.255.255 dns

static (VLAN2,Outside0) tcp 66.209.123.13 https 192.168.170.85 https netmask 255.255.255.255 dns

New Member

Re: Dual ISP's and Dual NAT statements inbound fails

Hi,

you cannot use 2 times the same TCP/UDP port for different internal server.

When a packet from outside reaches the asa, the asa tries to forward the packet and has 2 possible internal destinations. Which should the asa use? => This can't work!

Regards, Celio

New Member

Re: Dual ISP's and Dual NAT statements inbound fails

Is there any other way?

Re: Dual ISP's and Dual NAT statements inbound fails

305
Views
0
Helpful
4
Replies
CreatePlease to create content