Static NAT and two interfaces

[Ankur Bajaj]

Existing statement on ASA running 8.2 version code

static (inside,outside) 70.38.141.155 10.1.1.1 netmask 255.255.255.255

I'm adding a new outside interface, so I'll be adding

static (inside,newoutside) 70.38.141.155 10.1.1.1 netmask 255.255.255.255

Can I've both statements on ASA or it will create a issue.

[Terence Payet]

Hi,

Unfortunately it wouldn't work.

What you can do is Static PAT rules as per below:

static (inside,outside) TCP 70.38.141.155 80 10.1.1.1 80 netmask 255.255.255.255

static (inside,newoutside) TCP 70.38.141.155 443 10.1.1.1 443 netmask 255.255.255.255

You can have as many Static PAT rules as long as they are not the same. And this will load balance your traffic as well. As per example above, all http traffic will toward interface outside and https traffic will go towards interface newoutside

HTH.

Regards,

Terence