NAT 1 Public IP to Multiple Internal IPs and replace Port#
I have a Cisco 515e running 7.0(1) and would like to allow a single public IP to translate traffic to different internal hosts on my network by what port they are trying to access on the outside. So for instance if someone entered X.X.X.X:85, the pix could replace the port with 80 and goto a web server A. And on that same public ip X.X.X.X:99 and point to another host and change the port to 80 so that web server could be reached. I am sure this is possible, any help greatly appreciated.
Re: NAT 1 Public IP to Multiple Internal IPs and replace Port#
One problem with the config of my NATs on my PIX is that the inside interface is not NATed. Rather just the subnet of my internal network. When I add a NAT rule of the above I get: "This static port mapping rule is overlapping with a dynamic address translation rule for X.X.X.X/255.255.252.0 using global pool 1. Do you wish to proceed?" I suppose i could proceed without issue? In the end I would like to replace the subnet NAT using the inside interface, so that I don't receive this message every time i set up a static NAT. But i do not want to compromise deleting my security policies. Is it possible to insert the inside interface NAT and then remove the subnet NAT without deleting my Security Policies and causing too much disruption?
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...