cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
434
Views
0
Helpful
2
Replies

NAT Multiple Public Addresses to Single Service

mikedelafield
Level 1
Level 1

Hi guys.

This may be a very quick question as I think its not possible!

But is there a way to NAT 2 differentpublic addresses to the same internal service?

eg.

Internal server 192.168.1.1

Service port tcp/80

First NAT address 1.1.1.1

Second NAT address 2.2.2.2

1.1.1.1:80 -> 192.168.1.1:80

2.2.2.2:80 -> 192.168.1.1.80

We are looking for a way to use a second IP class for redundancy.

If not, then can anyone think of a workaround.

Thanks.

Mike

2 Replies 2

daniel.dib
Level 7
Level 7

I'm assuming this is for the ASA?

What you are looking for seems similar to this:

http://www.cisco.com/en/US/docs/security/asa/asa91/configuration/firewall/nat_objects.html#wp1830547

There they have multiple outside addresses mapped to one inside address. They don't specify ports there, do you only want to open up for port 80 or for other ports as well? That should at least give you an idea what is possible. Maybe it is possible to combine it with ports as well.

Daniel Dib
CCIE #37149

Please rate helpful posts.

Daniel Dib
CCIE #37149
CCDE #20160011

Please rate helpful posts.

Hi Daniel.

Thanks for the reply.

Ok it looks to be possible from version 8.3 onwards (ie object NAT)

Thanks for your help.

Mike

Review Cisco Networking for a $25 gift card