topic Multiple Network Object pointing to same IP address in Network Security

Multiple Network Object pointing to same IP address

tpennington — Tue, 12 Mar 2019 01:01:53 GMT

I have what i hope is not a unique problem. I have two ISP's and I want to be able to use failover between the two ISP's. The problem I cannot seem to overcome is that I want to be able to have outside email come in and connect to the same server. If I put in the config below into my ASA, it returns an error that I cannot have two network objects pointing to the same IP.

Is there a way around this?

I'm running v9.1 for my ASA.

object network mail-server

host 192.168.1.10

object network mail-server2

host 192.168.1.10

Multiple Network Object pointing to same IP address

Andrew Phirsov — Mon, 18 Feb 2013 05:52:45 GMT

It's really hard to understand why you're trying to define two objects pointing to the same IP)))

Multiple Network Object pointing to same IP address

nkarthikeyan — Mon, 18 Feb 2013 11:17:59 GMT

Hi,

I guess you can do as such in object-group and not on the object.... I hope you are defining the object that has to be used for NAT.

I have tried in ASA 8.2(5) 26 thru object-group.

Regards

Karthik

Please do rate if the given information helps.

Multiple Network Object pointing to same IP address

tpennington — Mon, 18 Feb 2013 17:02:39 GMT

The reason is so that is ISP-1 fails, I can still get email from ISP-2, all going to the same internal server.

Multiple Network Object pointing to same IP address

tpennington — Mon, 18 Feb 2013 17:03:20 GMT

What would the config look like?

Multiple Network Object pointing to same IP address

jocamare — Mon, 18 Feb 2013 23:38:47 GMT

This might be a problem with the code, you can do that with previous codes.

You can use the same object multiple times and it will work just as if you had two of them.

The following would be a workaround for that issue, but it has to be a problem with the code

object network mail-server

host 192.168.1.10

Object service MAIL

service tcp destination eq 25

nat (inside,outside) source static mail-server service MAIL MAIL

nat (inside,outside1) source static mail-server service MAIL MAIL