01-21-2003 05:09 PM - edited 03-09-2019 01:46 AM
I'm running a PIX520 with 6.2 . Can you have an internal server that is NAT'd to one address going out one interface and NAT'd to a different address going out a different interface?
01-21-2003 05:35 PM
Sure. Assuming your internal server is 10.1.1.1:
> static (inside,outside1) 1.1.1.1 10.1.1.1 netmask 255.255.255.255
> static (inside,outside2) 2.2.2.2 10.1.1.1 netmask 255.255.255.255
01-21-2003 06:08 PM
Thanks for the quick response. Now can I Nat/Pat my internal network going out two different interfaces with two different NATs...
global (intf1) 1 167.102.230.1-167.102.230.20
global (intf1) 1 167.102.230.21
global (intf2) 2 167.102.232.1-167.102.232.20
global (intf2) 2 167.102.232.21
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
nat (inside) 2 0.0.0.0 0.0.0.0 0 0
01-21-2003 06:28 PM
Now, can you have the following?
global (outside) 1 100.x.x.x netmask 255.255.255.0
global (dmz) 1 200.x.x.x netmask 255.255.255.0
nat (inside) 1 0.0.0.0 0.0.0.0 0 0
nat (dmz) 1 0.0.0.0 0.0.0.0 0 0
01-22-2003 08:12 AM
Are you saying this is valid? It looks good to me and will work for me!
Thanks, Chuck
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide