Nat two Public ip's to same internal IP

[Jignesh Desai]

I have a requirement to nat two public ip addresses to same interanl ip address.  Is this possible on ASA ver. 9.1?

[Jouni Forss]

Hi,

I guess you can configure that like this

object network 2-PUBLIC-IP

range 1.1.1.2 1.1.1.3

object network ONE-TO-MANY

host 10.10.10.10

nat (inside,outside) static 2-PUBLIC-IP

Where

• 2-PUBLIC-IP = Is the "object" that defines the 2 public IP addresses used for the NAT
• 1.1.1.2 and 1.1.1.3 = Are the public IP addresses
• ONE-TO-MANY = Is the "object" that holds the actual internal host IP address and the NAT configuration
• 10.10.10.10 = Is the example internal IP address
• nat = Is the NAT configuration inside the "object" that uses previously created "object" 2-PUBLIC-IP to define the public IP addresses for the NAT

Hopefully this helps

Remember to mark the question as answered if it did.

Or ask more if needed

- Jouni

[Jignesh Desai]

Thanks for the reply.  In my case, I have two public ip's that are not consecutive, i.e. one is a .150 and the other is a .140.  I don't think I can use the range command.  Is there another clever way to specify the public ip's?

[Jouni Forss]

Hi,

Try this

object network IP-1

host 1.1.1.140

object network IP-2

host 1.1.1.150

object-group network MULTIPLE-IPS

network-object object IP-1

network-object object IP-2

object network ONE-TO-MANY

host 10.10.10.10

nat (inside,outside) static MULTIPLE-IPS

Hope this helps

Remember to mark the question as answered or ask more if needed.

- Jouni