Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

Natting virual IP of MS Exchange Cluster

Hi...

I wanted to know whether creating a static translation for a virtual IP representing clustered MS Exchange 2003 servers actually works or needs to be done in a different way. I have tried when the servers are in DMZ or inside of the ASA 5520 but the result is the same, no communication. I just want to know that fundamentally translating a virtual IP is viable or not, so I know where to proceed after that.

All help is appreciated

Regards,

Mo Shea

2 ACCEPTED SOLUTIONS

Accepted Solutions

Re: Natting virual IP of MS Exchange Cluster

Hi,

I don't see why doing a 1-to-1 static NAT for a virtual IP would be a problem.

If you do STATIC PAT, you can have issues, but with STATIC NAT I don't see why.

What's exactly the issue that you're facing?

Federico.

Hall of Fame Super Blue

Re: Natting virual IP of MS Exchange Cluster

Mo

I just want to know that fundamentally translating a virtual IP is viable or not, so I know where to proceed after that.

There is no reason why it cannot be done as long as you are not changing port numbers as Federico says. We have done this with VIPs for http farms before and it works fine.

Jon

3 REPLIES

Re: Natting virual IP of MS Exchange Cluster

Hi,

I don't see why doing a 1-to-1 static NAT for a virtual IP would be a problem.

If you do STATIC PAT, you can have issues, but with STATIC NAT I don't see why.

What's exactly the issue that you're facing?

Federico.

Hall of Fame Super Blue

Re: Natting virual IP of MS Exchange Cluster

Mo

I just want to know that fundamentally translating a virtual IP is viable or not, so I know where to proceed after that.

There is no reason why it cannot be done as long as you are not changing port numbers as Federico says. We have done this with VIPs for http farms before and it works fine.

Jon

Community Member

Re: Natting virual IP of MS Exchange Cluster

Thanks for the feedback,

I checked the setup again (its actually for a customer) and it seems they have installed a Bluecoat appliance infront of the ASA, probably have to review its configuration. All MS Exchange cluster setups that I had done before were published on MS ISA, the latter being natted by the ASA, but this setup is a little bit different. I will post the outcome once the setup is up and running.

Thanks again.

184
Views
0
Helpful
3
Replies
CreatePlease to create content