NAT Multiple Public Addresses to Single Service

[mikedelafield]

Hi guys.

This may be a very quick question as I think its not possible!

But is there a way to NAT 2 differentpublic addresses to the same internal service?

eg.

Internal server 192.168.1.1

Service port tcp/80

First NAT address 1.1.1.1

Second NAT address 2.2.2.2

1.1.1.1:80 -> 192.168.1.1:80

2.2.2.2:80 -> 192.168.1.1.80

We are looking for a way to use a second IP class for redundancy.

If not, then can anyone think of a workaround.

Thanks.

Mike

[daniel.dib]

I'm assuming this is for the ASA?

What you are looking for seems similar to this:

http://www.cisco.com/en/US/docs/security/asa/asa91/configuration/firewall/nat_objects.html#wp1830547

There they have multiple outside addresses mapped to one inside address. They don't specify ports there, do you only want to open up for port 80 or for other ports as well? That should at least give you an idea what is possible. Maybe it is possible to combine it with ports as well.

Daniel Dib
CCIE #37149

Please rate helpful posts.

[mikedelafield]

Hi Daniel.

Thanks for the reply.

Ok it looks to be possible from version 8.3 onwards (ie object NAT)

Thanks for your help.

Mike