two public IP to one internal

[reagentom]

in PIX 515E how I can NAT two public IPs to one Internal IP, it's giving error for overlap

Pls help

[m.sir]

You cannot configure this..

If one public IP has two inside IPs--->

Traffic arrives to Public_IP How firewall should know to which inside IP forward traffic? private_IP_1 or private_IP_1 ??? So its reason why its not possible to have 1 public Ip to 2 private IP mappings....

BUT you can use port forwarding... Let we say you have one public IP and two private servers (FTP and WWW) so you can forward FTP traffic to one server and www traffic to second server

static (inside,outside) tcp public_IP ftp private_IP_1 ftp netmask 255.255.255.255

static (inside,outside) tcp public_IP www private_IP_1 www netmask 255.255.255.255

M.

Hope that helps rate if it does

[a.kiprawih]

You can achieve that provided you mapped the 2 public IP to one internal IP to a different port, i.e 1st public IP is to provide access to WWW (tcp 80), while the 2nd public IP is to allow access to FTP (TCP 21) and so on.

Make sure they don't clashed or use same port number:

static (inside,outside) tcp 1.1.1.101 www 10.0.0.10 www netmask 255.255.255.255

static (inside,outside) tcp 1.1.1.100 8080 10.0.0.10 8080 netmask 255.255.255.255

static (inside,outside) tcp 1.1.1.100 23 10.0.0.10 23 netmask 255.255.255.255

HTH

AK

[mlowery · Accepted solution]

Another option is to create two IP addresses on your internal host and create two separate 1-to-1 NAT translations for each internal IP.

[reagentom]

I did the same, thanks allot