Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

help with hairpinning

I'm using ASA5520 with 7.2

Inside Interface 192.168.0.0/19

Outside Interface 111.111.111.128/27

With hairpinning enabled, I can access webservers from the inside of the network using their public IPs that are natted back to the inside. This works great right now.

My ISP gave me a second Public IP block to add to my existing Public network, call it 222.222.222.128/27

How do I allow the new 222.222.222.128/27 network to be also hairpinned?

1 REPLY
Green

Re: help with hairpinning

You should only have to add an additional static statements for the new servers addresses. Your existing hairpin probably looks like this...

static (inside,outside) 111.111.111.x 192.168.0.x netmask 255.255.255.255

static (inside,inside) 111.111.111.x 192.168.0.x netmask 255.255.255.255

New network hairpin...

static (inside,outside) 222.222.222.y 192.168.0.y netmask 255.255.255.255

static (inside,inside) 222.222.222.y 192.168.0.y netmask 255.255.255.255

131
Views
0
Helpful
1
Replies
CreatePlease to create content