Static NAT and two interfaces

Ankur Bajaj — Tue, 12 Mar 2019 08:07:25 GMT

Existing statement on ASA running 8.2 version code

static (inside,outside) 70.38.141.155 10.1.1.1 netmask 255.255.255.255

I'm adding a new outside interface, so I'll be adding

static (inside,newoutside) 70.38.141.155 10.1.1.1 netmask 255.255.255.255

Can I've both statements on ASA or it will create a issue.

Hi,

Terence Payet — Fri, 12 Aug 2016 11:24:56 GMT

Hi,

Unfortunately it wouldn't work.

What you can do is Static PAT rules as per below:

static (inside,outside) TCP 70.38.141.155 80 10.1.1.1 80 netmask 255.255.255.255

static (inside,newoutside) TCP 70.38.141.155 443 10.1.1.1 443 netmask 255.255.255.255

You can have as many Static PAT rules as long as they are not the same. And this will load balance your traffic as well. As per example above, all http traffic will toward interface outside and https traffic will go towards interface newoutside

HTH.

Regards,

Terence

topic Hi, in Network Security

Static NAT and two interfaces

Hi,