topic ASA NAT Question? in Network Security

ASA NAT Question?

ciscoKart — Tue, 12 Mar 2019 01:53:55 GMT

Hi All,

Hope you can help with this one. I need a solution the following problem either additional hardware required or could it be done with current hardware?

Problem:

I need a way for multiple video conferencing endpoints to register to one public (outside address) of our firewall that is NAT'd to two private addresses (inside).

We have a Polycom DMA7000 super cluster, so two DMA 7000 acting has a pair with two different IP addresses. The DMA has a built in DNS, so handles the failover by changing the DNS A record replacing the IP address with the active unit, so that works for failover on the LAN by endpoints register using the DNS name.

So the problem is external endpoints need to register to just one outside address, but NAT needs to be the active unit. So can this one outside to two inside NAT be done on Cisco ASA 5520 or do I need to use a load balancer on the inside?

Any suggestions or solutions welcome.

ASA NAT Question?

Julio Carvajal — Thu, 06 Jun 2013 20:02:45 GMT

This would be a dedicated one to one mapping right?

No port-forwarding but static one to one right?

Regards

ASA NAT Question?

brianwilliams99 — Thu, 06 Jun 2013 20:40:52 GMT

Normally devices will have a VIP that they share between the 2 devices. See if they have a VIP and point your NAT to you VIP between the 2 devices.

ASA NAT Question?

ALIAOF_ — Thu, 06 Jun 2013 21:22:08 GMT

Check out this thread I did something like that:

https://supportforums.cisco.com/message/3933212#3933212