cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2514
Views
5
Helpful
4
Replies

Multiple public IP Addresses on ASA 5505

Vikrant Ambhore
Level 1
Level 1

Hi

Is it possible to configure multiple public IP Addresses (around-8) on Cisco ASA 5505, actuly we have total 3 servers behind the firewall and more 
application working on below mentioned ports actuly I want to translate traffic 80 to 8080(Private IP) as per below mentioned details


LAN IP:-
Node-1  -----192.168.1.5
Node-2  -----192.168.1.2
Node-3  -----192.168.1.3
Sample Public IP which you will configure on ASA:- XX.XX.XX.--

Node-1
192.168.1.5:80   <-------------------------------->  XX.XX.XX.1:80     
192.168.1.5:8080 <-------------------------------->  XX.XX.XX.2:80      ---------------------Here 80 port must be forward to 8080
192.168.1.5:8983 <-------------------------------->  XX.XX.XX.1:8983
192.168.1.5:7070 <-------------------------------->  XX.XX.XX.3:80        --------------------- Here 80 port must be forward to 7070
192.168.1.5:9983 <-------------------------------->  XX.XX.XX.3:9983
192.168.1.5:22   <-------------------------------->  XX.XX.XX.1:10222  --------------------- Here 10222 port must be forward to 22

Node-2
192.168.1.2:80   <-------------------------------->   XX.XX.XX.4:80
192.168.1.2:8080 <-------------------------------->   XX.XX.XX.5:80
192.168.1.2:85   <-------------------------------->   XX.XX.XX.5:85
192.168.1.2:3389 <-------------------------------->   XX.XX.XX.5:10389  --------------------- Here 10389 port must be forward to 3389

Node-3
192.168.1.3:80    <-------------------------------->   XX.XX.XX.6:80
192.168.1.3:8080  <-------------------------------->   XX.XX.XX.6:8080
192.168.1.3:9983  <-------------------------------->   XX.XX.XX.6:9983
192.168.1.3:8983  <-------------------------------->   XX.XX.XX.6:8983
192.168.1.3:22    <-------------------------------->   XX.XX.XX.6:10222 --------------------- Here 10222 port must be forward to 22
192.168.1.3:7070  <-------------------------------->   XX.XX.XX.7:80  --------------------- Here 80 port must be forward to 7070

4 Replies 4

Hi

Yes it's possible, it's very easy actually. The hard part is to get 3 public IP addresses.