Am I correct in my findings that it is not possible to configure an external ip addresses on two different ports say 80 and 8081 re-directing to a single inside address port 80. Pix generates "overlap" errors when attempting to configure this. Background info - the application running on port 80 on the inside is not accessed by a browser. All comments welcome - especially work-arounds. Config excerpts can be provided on request.
thanks for your speedy reply - I looked at the document you suggested previously but checked it again and it doesn't include an example of exactly what I am trying to do. It's close but not quite the same. Please see attched. I've just included the relevant fragments. If I've missed something important let me know.
as the access-list shows this device is being accessed from the internet - therefore I have no control over this route. The other route is defined by the target device having it's default gateway set as the PIX. The conflict is because the target of both re-directs is the same ip address:port combination. I'm still open to suggestions !
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...