Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

How to configure 2 NATs with access-list based on destination port

Is it possible to configure 2 NATs and have them used based on the destination port of the packets?

I'm currently trying to do this with a Cisco 881.

I can see that I can create 2 access-lists based on source and destination IP, but there is no option for source or destination port:

access-list 1 permit 192.168.2.0 0.0.0.255

  • If not possible with the 881, is this possible with the ASA 5505?
  • If that's the case, can the ASA 5505 be configured as one half of a site-to-site VPN with the other side a Cisco 881?

To explain further, we currently have 2 WAN connections:

  • Expensive fiber connection for mission-critical apps (web hosting, mail, accessing customer sites)
  • Cheap DSL connection for web browsing (HTTP+HTTPS)

We're using a Linux machine to route based on destination port. Anything for HTTP or HTTPS goes via the cheap DSL connection and everything else goes via the fiber connection.

Everyone's tags (5)
3 REPLIES

Re: How to configure 2 NATs with access-list based on destinatio

Can you post out a detailed diagram of your requirement with dummy ip schema attached to it?

regds

New Member

Re: How to configure 2 NATs with access-list based on destinatio

I'm attaching a diagram showing everything I'm trying to achieve.

I've also included the second network (on the right) that needs a site-to-site VPN between the two routers.

What I need to know at this point if all this is possible and what devices are best before I actually purchase anything.

Thanks very much

Re: How to configure 2 NATs with access-list based on destinatio

Hi,

not sure if I've got your point, but wouldn't using an extended ACL instead of a standard ACL help?

BR,

Milan

776
Views
0
Helpful
3
Replies
CreatePlease to create content