03-01-2004 08:47 AM - edited 03-09-2019 06:35 AM
Hello
I have a Pix 525, Is it possible to have two different Gobal address's statically nating to one local address? i.e:
static (inside,outside) 192.168.0.1 10.1.1.1 netmask 255.255.255.255
static (inside,outside) 192.168.0.2 10.1.1.1 netmask 255.255.255.255
Thanks in advance for your help
03-01-2004 09:17 AM
For some unknown reason the PIX will accept the two lines of programming even thi=ough they are wrong.
If you, for example, wish e-mail to be on 192.168.0.1 and http on 192.168.0.2 both to point at the same inside IP address of 10.1.1.1 you will need to write the lines as specific port NAT statements and also write the access-list on the outside interface to allow the specific services through to the address.
The other way to do it is to give the inside server more than one address on the network card and statically NAT the two outside addresses to the two inside addresses
Cheers
Steve
03-01-2004 10:24 AM
if this is the situation then it is possible to map two global ips to a single private ip, but it is possible only in
6.3.3 code. If you want to implement this situation then we may have to go with the upgradation of firewall OS depending on what code you are on?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide