Thanks for verifying. I am aware of how to do this with 1 IP and different ports or diffrent IP's and the same port. wasn't sure if it was a weird Checkpoint loadbalancing thing. the checkpoint must be configured incorrectly. thanks
... View more
Hi,
I am moving some rules from a checkpoint firewall (r77.30) to an new ASA pair (9.8(2)28
one of the rules I have seen has 2 internal hosts sharing the same external IP on the same ports.
is there anyway to do this on the cisco?
e.g.
outside interface 60.50.40.1 is natted to DMZ hosts 10.10.10.1 and 10.10.10.2 on port 22 on the checkpoint
I can do this
nat (outside,dmz) source static any any destination static NAT_IP_60.50.40.1 GRP-LAN-PUB no-proxy-arp
GRP-LAN-PUB would include hosts 10.10.10.1 and 10.10.10.2
not sure thats going to work though.
Any thoughts would be helpful.
Thanks
... View more
Hi,
I have just set this up on a 5508X failover cluster to Azure. We are using express route as our primary and now have the VPN as a backup.
fairly simple setup now that the ASA supports IKEv2
J.
... View more
