PIX inside server with 2 NIC---> swamy

[brindha]

Dear All,

I am configuring the pix 525. I want to NAT

0ne global IP to the server in the inside having 2 NIC cards configured each with IP address in the same subnet range.

The ? is

Is it possible to map single global to 2

IP addresses on the same machine? from low sec to high sec.

This has to be used on datacentre environment.

Thanks in advance

swamy

[sachinraja]

Hi Swamy,

If the NIC cards of the server uses different ports, then you can map the server IPs to a single global IP address, which can be accessed from outside. If it uses the same port, you cannot assign it to a single IP address on the outside.

You need to use Static PAT if using the same global for different IPs on the inside with different ports.

For example, if you want to provide a single address for global users to access FTP, HTTP, and SMTP, but these are all actually different servers on the local network, you can specify static statements for:

•local_ip_A/global_ip_A/FTP

•local_ip_B/global_ip_A/HTTP

•local_ip_C/global_ip_A/SMTP

example:

static (inside,outside) tcp interface ftp 10.1.1.30 ftp netmask 255.255.255.255

static (inside,outside) tcp interface telnet 10.1.1.15 telnet netmask 255.255.255.255

Hope this helps.. Let us know if you need any more info. rate replies if found useful...

Raj