cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


123
Views
0
Helpful
2
Replies
Beginner

NAT Multiple Public Addresses to Single Service

Hi guys.

This may be a very quick question as I think its not possible!

But is there a way to NAT 2 differentpublic addresses to the same internal service?

eg.

Internal server 192.168.1.1

Service port tcp/80

First NAT address 1.1.1.1

Second NAT address 2.2.2.2

1.1.1.1:80 -> 192.168.1.1:80

2.2.2.2:80 -> 192.168.1.1.80

We are looking for a way to use a second IP class for redundancy.

If not, then can anyone think of a workaround.

Thanks.

Mike

2 REPLIES 2
Rising star

NAT Multiple Public Addresses to Single Service

I'm assuming this is for the ASA?

What you are looking for seems similar to this:

http://www.cisco.com/en/US/docs/security/asa/asa91/configuration/firewall/nat_objects.html#wp1830547

There they have multiple outside addresses mapped to one inside address. They don't specify ports there, do you only want to open up for port 80 or for other ports as well? That should at least give you an idea what is possible. Maybe it is possible to combine it with ports as well.

Daniel Dib
CCIE #37149

Please rate helpful posts.

Daniel Dib
CCIE #37149
CCDE #20160011

Please rate helpful posts.
Beginner

NAT Multiple Public Addresses to Single Service

Hi Daniel.

Thanks for the reply.

Ok it looks to be possible from version 8.3 onwards (ie object NAT)

Thanks for your help.

Mike

CreatePlease to create content
Content for Community-Ad
FusionCharts will render here