Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Can I do this with NAT?

I have two websites hosting on one server inside. Currently I have a static NAT from a public address to an internal address for one of the websites, but, if I want to statically nat the ip address for a second website, it says that there is an overlapp and it can't do it.

Our old firewall did this fine, and I was wondering how I can get my PIX to forward port 80 from two public ip's to one private ip. Can the pix do this?



Re: Can I do this with NAT?


No, the PIX cannot do this (and you cannot configure it as you've seen). The problem we run into is on the outbound connections. If you have two translations built for an internal server on port 80, how does the PIX know which global address to translate the source address to? Address A or Address B? If we translate the response to an address that the client did not use when sending the initial packet, he is going to discard the response based on the fact that he got a response from someone that he didn't send anything to. You will need to configure your web servers to listen on different ports (80 and 8080 as an example) and then build your statics like this:

static (inside,outside) tcp host 80 host 80

static (inside,outside) tcp host 8080 host 8080

Hope this helps.