Public IP mapping

[milan_ver]

I have one router & two firewall.

The internet link is terminated on router.

Router••àfirewall 1••à Firewall2••àServer••à

Firewall2 & Server are managed by me and Firewall 1 & router are managed by other team.

For my all server gateway is the IP of firewall 1.

I want to use one public IP for my server. So I need to know where I have to do the NAT for the public IP.

[Jouni Forss]

Hi,

I think the correct people to ask would be the other team managing the devices infront of both your firewall and the server.

Typically I will NEVER use any NAT functions on a router if I can do the same on an ASA firewall.

I would imagine that the NAT for your server would be done on either Firewall 1 or the router. If you dont have any public networks connected to your firewall, routed towards your firewall or located behind it then you cant really do anything about this.

In the end you will still need to consult the people managing the devices on the edge of the network since they are controlling the traffic inbound to the network.

- Jouni