topic I think you'd need to make in Network Security

Nat load balancing

James Simpson — Tue, 12 Mar 2019 05:25:26 GMT

I have a cisco ASA firewall (9.1). I have 2 x FTP servers that sit in the DMZ

10.99.1.60

10.99.1. 61 I want to NAT them to 193.164.55.20

So when ever an external connection trys to contact my FTP server it will pick either one at Random

Many thanks

I think you'd need to make

David paull — Sat, 31 Jan 2015 06:10:04 GMT

I think you'd need to make the two servers a cluster and create a virtual server that includes both pieces of hardware.

From Cisco in regards to asa 9.1: Load balancing works with IPsec clients and SSL VPN client and clientless sessions. All other VPN connection types (L2TP, PPTP, L2TP/IPsec), including LAN-to-LAN, can connect to an ASA on which load balancing is enabled, but they cannot participate in load balancing.

There's a huge writeup here: http://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/vpn/asa_91_vpn_config/vpn_params.html

And without the equipment to play with, I cannot offer anymore help. Most of the load balancing I've dealt with is through netscalers and f5's.

this is a called ROTARY NAT.

joe19366 — Sat, 31 Jan 2015 06:15:02 GMT

this is a called ROTARY NAT.

its possible with IOS - but not ASA.

sorry

why not just run haproxy or windows lb service, have a single IP for both and be done with it?