PIX-515: multiple PAT to the same inside host

[druch]

We have a PIX-515 with 6.2(2) in use. I've configured PAT for SMTP and POP3 access to two different inside host's:

static (inside,outside) tcp x.x.x.x smtp 192.168.254.210 smtp netmask 255.255.255.255

static (inside,outside) tcp x.x.x.x pop3 192.168.254.211 pop3 netmask 255.255.255.255

The outside public address is resolved by DNS with mail.x.com.

Now I'd like to configure to additional DNS entries (two different public ip's) smtp.x.com and pop.x.com which should be translated to the same inside host's that are already configured above. Using the static commend with ports is not possible (getting error message that addresse overlapping).

Is there a way to configure multiple static address translations to the same inside host?

[mostiguy]

Are you trying to have mutiple external ip's and ports connect to one intenal IP and port? I don't think that is possible.

[druch]

Yes, that's exactly what I like to do.

I've made a "workaround" now by setting a secondary IP address on the internal host (Windows NT Server).

Thank's for replaying.

[mike.scaggs]

Have you tried doing port redirection??

example:

static (inside,outside) tcp 172.18.124.99 telnet 10.1.1.6 telnet netmask 255.255.255.255 0 0

static (inside,outside) tcp 172.18.124.99 ftp 10.1.1.3 ftp netmask 255.255.255.255 0 0

static (inside,outside) tcp 172.18.124.208 telnet 10.1.1.4 telnet netmask 255.255.255.255 0 0

static (inside,outside) tcp interface telnet 10.1.1.5 telnet netmask 255.255.255.255 0 0

static (inside,outside) tcp interface www 10.1.1.5 www netmask 255.255.255.255 0 0

static (inside,outside) tcp 172.18.124.208 8080 10.1.1.7 www netmask 255.255.255.255 0 0

[druch]

Thank's for your example.

I've already tried to configure port redirection with two different public ip addresses translating to the same local ip address, but this is not accepted by the PIX.

I can't exactly figure out what's the function of the 'static (inside, outside) tcp interface ..' commands here.