NAT from outside to two internal email servers

[lcaruso]

Hi,

I have been told one cannot do this...

NAT inbound from one public ip address to two separate internal email server addresses ss required for failover.

This is specifically just for OWA/https and not SMTP. 

Is there a NAT solution that would be applicable for this requirement?

[Rishabh Seth]

You can translate one public ip to two different internal ip addresses by using different port numbers for each internal server.

eg.

internal ips : 10.1.1.1 ; 10.1.1.2.

public ip : 100.1.1.1

use port 8080 to map traffic for server with ip 10.1.1.1

use port 8081 to map traffic for server with ip 10.1.1.2

translation would look like :

100.1.1.1:8080 --> 10.1.1.1:443

100.1.1.1:8081 --> 10.1.1.2:443

Hope it helps.

Thanks,

R.Seth

[Marius Gunnerud]

Other than using two different ports as R.Seth has mentioned, you would need to put a load balancer (such as Netscaler) behind the ASA and then NAT to a VIP on the Netscaler.

--

Please remember to select a correct answer and rate helpful posts