static NAT translations on multiple WAN interfaces (PIX 525)
i am trying to achieve the following and wonder if it's possible and if so, how to do it.
we have an internal LAN of 192.168.101.0/24. we have two WAN/outside connections & interfaces, lets say 184.108.40.206 & 220.127.116.11.
all internal traffic from 192.168.101.0 uses dynamic NAT overload on the 18.104.22.168 interface to get online and i have a few static NAT translations for severs on this connection. this works fine and is fairly standard.
i have a server on the IP address 192.168.101.10 that is a VoIP server and that needs to go down the internal 22.214.171.124 (due to QoS on this WAN interface). i am able to create a static NAT translation in the PIX for this rule, however i am confused about what default route the PIX needs to know for this connection.
currently the default route is for the 126.96.36.199 interface, and yet i can not add another default route for 188.8.131.52 without giving it a higher metric than the 184.108.40.206 interface. the 220.127.116.11 interface obviously needs a default route so it knows the path to the internet yet i am not sure how to do this. when using a Cisco router i have been able to create a route map to give different default routes to difference access lists and this has worked, however what do i do on the pix?
i hope i have explained the issue clearly enough and if anyone can assist that would be excellent
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :