tema NAT - 2 Public IP's to 1 Internal IP en Network Security

NAT - 2 Public IP's to 1 Internal IP

Zubair.Sayed_2 — Mon, 11 Mar 2019 23:42:03 GMT

Hi members

Is it possible to perform a NAT whereby I have 2 public IP's and they need to NAT to the same Internal IP?

If this is possible how can it be done because I have tried and dont think this can be done.

Thanks

Zubair

Re: NAT - 2 Public IP's to 1 Internal IP

Jouni Forss — Tue, 14 Aug 2012 09:21:36 GMT

Hi,

Could you please provide the purpose of this kind of setup?

What software level are you running on the firewall? 8.2 and earlier OR 8.3 and after?

You can NAT a single local IP address to many public IP addresses with Policy NAT. But in a Policy NAT setup you have to define the remote/destination networks for which the local IP address is visible with the mentioned public IP addresses.

If you can clarify your setup that would require such a NAT configuration I could give you an example.

- Jouni

Re: NAT - 2 Public IP's to 1 Internal IP

Zubair.Sayed_2 — Tue, 14 Aug 2012 09:32:38 GMT

Journi,

Thanks for the reply.

Basically we have our companies web server and a benchmark server and these will be intergrated into 1 server now.

Currently we have 2 public IP's going to 2 seperate internal ip's.

Traffic can come from anywhere on the Internet to these servers.

Assume the public ip's are 217.1.1.1 and 217.1.1.2 and the internal private ip is 10.1.1.1

Hope this is what you were after.

NAT - 2 Public IP's to 1 Internal IP

Jouni Forss — Tue, 14 Aug 2012 10:17:25 GMT

Hi,

I think the setup would only work if you knew the source address/network where people were connecting to each of the public address.

For example

If you knew that network 2.2.2.0/24 would connect to IP1 and network 3.3.3.0/24 would connect to IP2 you could easily configure a Policy NAT

Is it possible for you to list the services (TCP/UDP port numbers) that need to be reached from the Internet for each of the servers that have not yet been combined?

Can you also mention the software version running on your firewall? I presume you either have a PIX or ASA since you are writing on these forums

- Jouni

Re: NAT - 2 Public IP's to 1 Internal IP

Zubair.Sayed_2 — Tue, 14 Aug 2012 10:36:10 GMT

I wont know the source because this is the company webserver so source could from anywhere in the world.

I suppose the Policy NAT will work well if you know the source IP only.

We using ASA with version 8.2

Thanks

NAT - 2 Public IP's to 1 Internal IP

Jouni Forss — Tue, 14 Aug 2012 12:00:03 GMT

Hi,

I'm wondering if it would be possible to use port forwarding to achieve what you are trying.

- Jouni