cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
211
Views
0
Helpful
1
Replies

Static Nat issue

BP
Level 1
Level 1

Recently purchased a ASA5510 Security Bundle firewall to upgrade from a PIX 515E. the PIX was running 6.3(3) and the new ASA is running 7.2(1). On the PIX I could have multiple outside IP's mapped to a single internal ip i.e

10.1.1.1 cluster 1

10.1.1.2 cluster 2

static (DMZ1,outside) 172.16.1.100 10.1.1.1 netmask 255.255.255.255 0 0

static (DMZ1,outside) 172.16.1.101 10.1.1.1 netmask 255.255.255.255 0 0

static (DMZ1,outside) 172.16.1.102 10.1.1.2 netmask 255.255.255.255 0 0

static (DMZ1,outside) 172.16.1.103 10.1.1.2 netmask 255.255.255.255 0 0

but in 7.2(1) this fuctionallity seems to be gone.

The reason I need to do this is I have a high avail cluster in DMZ1, I could try assigning multi private address to it and then just do the nats to those address. I just thought it was odd that 6.3 can do it but 7.2 can't. Does anybody have another solution to solve this or do I just have to add the multiple ips to the clusters??

1 Reply 1

smahbub
Level 6
Level 6

You need to add multiple IP's to the clusters