Can you map 1 Public IP to many inside private IP's for port forwarding?

[funraps]

Hi,

I would like to have one public IP setup and forward request to their respective machines in the inside based on what port the request comes in on.

For example Public IP x.x.x.x gets a request for https, this should forward to the inside IP y.y.y.y.

Request on the external IP for http traffic, should be forwarded to z.z.z.z (SAME PUBLIC IP)

Any help?

[pcomeaux]

Yes, you can.

Here's an example I just did on my pix:

static (inside,outside) tcp interface 80 192.168.200.10 80 netmask 255.255.255.255

static (inside,outside) tcp interface 25 192.168.200.11 25 netmask 255.255.255.255

This is essentially what a Pix does when it performs PAT, but in this case you can explicitly define the port mappings.

In the above example, I used the keyword interface to represent the dynamic IP on my outside interface. However, you can substitute a known public IP in you case.

Your DNS records would point to the public IP you specify in the static commands. Of course, you will need the appropriate ACL applied to the outside interface to let the outside initiated traffic in.

Hope this helps,

peter

[jmia]

Don't forget to issue clear xlate after modifying any ACLs or Statics !!

Jay