01-21-2003 05:09 PM - edited 03-09-2019 01:46 AM
I'm running a PIX520 with 6.2 . Can you have an internal server that is NAT'd to one address going out one interface and NAT'd to a different address going out a different interface?
01-21-2003 05:35 PM
Sure. Assuming your internal server is 10.1.1.1:
> static (inside,outside1) 1.1.1.1 10.1.1.1 netmask 255.255.255.255
> static (inside,outside2) 2.2.2.2 10.1.1.1 netmask 255.255.255.255
01-21-2003 06:08 PM
Thanks for the quick response. Now can I Nat/Pat my internal network going out two different interfaces with two different NATs...
global (intf1) 1 167.102.230.1-167.102.230.20
global (intf1) 1 167.102.230.21
global (intf2) 2 167.102.232.1-167.102.232.20
global (intf2) 2 167.102.232.21
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
nat (inside) 2 0.0.0.0 0.0.0.0 0 0
01-21-2003 06:28 PM
Now, can you have the following?
global (outside) 1 100.x.x.x netmask 255.255.255.0
global (dmz) 1 200.x.x.x netmask 255.255.255.0
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
nat (dmz) 1 0.0.0.0 0.0.0.0 0 0
01-22-2003 08:12 AM
Are you saying this is valid? It looks good to me and will work for me!
Thanks, Chuck
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: