Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

NAT Multiple Public Addresses to Single Service

Hi guys.

This may be a very quick question as I think its not possible!

But is there a way to NAT 2 differentpublic addresses to the same internal service?

eg.

Internal server 192.168.1.1

Service port tcp/80

First NAT address 1.1.1.1

Second NAT address 2.2.2.2

1.1.1.1:80 -> 192.168.1.1:80

2.2.2.2:80 -> 192.168.1.1.80

We are looking for a way to use a second IP class for redundancy.

If not, then can anyone think of a workaround.

Thanks.

Mike

2 REPLIES

NAT Multiple Public Addresses to Single Service

I'm assuming this is for the ASA?

What you are looking for seems similar to this:

http://www.cisco.com/en/US/docs/security/asa/asa91/configuration/firewall/nat_objects.html#wp1830547

There they have multiple outside addresses mapped to one inside address. They don't specify ports there, do you only want to open up for port 80 or for other ports as well? That should at least give you an idea what is possible. Maybe it is possible to combine it with ports as well.

Daniel Dib
CCIE #37149

Please rate helpful posts.

Daniel Dib CCIE #37149 Please rate helpful posts.
Community Member

NAT Multiple Public Addresses to Single Service

Hi Daniel.

Thanks for the reply.

Ok it looks to be possible from version 8.3 onwards (ie object NAT)

Thanks for your help.

Mike

102
Views
0
Helpful
2
Replies
CreatePlease to create content