topic Nat two Public ip's to same internal IP in Network Security

Nat two Public ip's to same internal IP

Jignesh Desai — Tue, 12 Mar 2019 01:37:43 GMT

I have a requirement to nat two public ip addresses to same interanl ip address. Is this possible on ASA ver. 9.1?

Nat two Public ip's to same internal IP

Jouni Forss — Thu, 02 May 2013 15:46:09 GMT

Hi,

I guess you can configure that like this

object network 2-PUBLIC-IP

range 1.1.1.2 1.1.1.3

object network ONE-TO-MANY

host 10.10.10.10

nat (inside,outside) static 2-PUBLIC-IP

Where

2-PUBLIC-IP = Is the "object" that defines the 2 public IP addresses used for the NAT
1.1.1.2 and 1.1.1.3 = Are the public IP addresses
ONE-TO-MANY = Is the "object" that holds the actual internal host IP address and the NAT configuration
10.10.10.10 = Is the example internal IP address
nat = Is the NAT configuration inside the "object" that uses previously created "object" 2-PUBLIC-IP to define the public IP addresses for the NAT

Hopefully this helps

Remember to mark the question as answered if it did.

Or ask more if needed

- Jouni

Nat two Public ip's to same internal IP

Jignesh Desai — Thu, 02 May 2013 16:04:37 GMT

Thanks for the reply. In my case, I have two public ip's that are not consecutive, i.e. one is a .150 and the other is a .140. I don't think I can use the range command. Is there another clever way to specify the public ip's?

Re: Nat two Public ip's to same internal IP

Jouni Forss — Thu, 02 May 2013 16:09:25 GMT

Hi,

Try this

object network IP-1

host 1.1.1.140

object network IP-2

host 1.1.1.150

object-group network MULTIPLE-IPS

network-object object IP-1

network-object object IP-2

object network ONE-TO-MANY

host 10.10.10.10

nat (inside,outside) static MULTIPLE-IPS

Hope this helps

Remember to mark the question as answered or ask more if needed.

- Jouni