NAT Configuration

[am_rajan]

Hi

I am new to this topics and will be great if any one can help.

FTD 1120 in HA.

Server1.xxx.ws --> public IP 55.55.55.55 ---NAT----> 172.x.x.100:8080
Server2.xxx.ws --> public IP 55.55.55.55 ---NAT----> 172.x.x.150:3636

As you can see my task is to access 2 different internal servers (Private ips(172.x.x.x)) using same public IP (55.55.55.55) which has different DNS names(sub domains).

Pls do help.

[MHM Cisco World]

sorry what is issue? 
you want to know how you can config this NAT ? 
if yes how you manage the FTD via FDM or FMC ?
MHM

[am_rajan]

Hello 

Yes, I would like to know how to configure the NAT and ACCESS rule, and I am using FDM. And please keep in mind that the traffic initiates from outside to inside, and it will be HTTPS traffic. 

The client access the service through the dns which is https://server1.xxx.ws or https://server2.xxx.ws and both are linked to the same public IP which is 55.55.55.55. and then it needs to be nated to 2 different hosts. 

My confusion is both incoming traffic is https so how can we differentiate this so that we can nat this to appropriate internal hosts 

Hope you understand my issue

[MHM Cisco World]

Now it clear 

In your original I dont see you mention both mapped IP use http port 

If that case 

Sorry I dont see anyway make FTD know the traffic incoming for any server.

If you use two ports (not both use http) that can solve issue.

Or order new public IP and use it for one server.

Sorry again 

Have a nice day 

MHM

[Georg Pauwen]

Hello,

the below should work:

object network InternalServer1
host 172.x.x.100

object network InternalServer2
host 172.x.x.150

object network InternalServer1
nat (inside,outside) static 55.55.55.55 service tcp 8080

object network InternalServer2
nat (inside,outside) static 55.55.55.55 service tcp 3636