We help IT Professionals succeed at work.

NAT problem on PIX

rhugga
rhugga asked
on
First question,

Can I map two outisde addresses to same the inside address:
ie
static (inside,outside) keyhole_out charger netmask 255.255.255.255 0 0
static (inside,outside) charger_out charger netmask 255.255.255.255 0 0

I did this, everything seemed to be working Friday, but now websites/DNS on this site cannot be seen even tough I can ping the addresses fine. I made sure the rulesets were the same to both.

Now I backed these setting out but still seems to be in affect. Can I refresh this w/o rebooting the PIX?

Thanks greatly,
CC
Comment
Watch Question

Les MooreSr. Systems Engineer
CERTIFIED EXPERT
Top Expert 2008

Commented:
try using
pixfirewall# clear xlate

You might have to be in config mode:

pixfirewall(config)# clear xlate

Why would you want two outside addresses mapped to the same inside?

Commented:
You can do this on the port level, by specifying a different port at the end of the static statement, to differentiate between the services running on the same server.  You do no want a general static statement pointing to the same ip address and using the same services.

Author

Commented:
Yea, I found this out the hard way.

I want my DNS servers to have A records and my mail servers to have A records, both are on the same servers.

mail1 & ns1
mail2 & ns2

Is there a way I can NAT port 53 tcp/udp to the other addresses using the port method you describe?


Thanks,
Chuck

ADMINISTRATION WILL BE CONTACTING YOU SHORTLY.  Moderators Computer101 or Netminder will return to finalize these if still open in seven days.  Please post closing recommendations before that time.

Question(s) below appears to have been abandoned. Your options are:
 
1. Accept a Comment As Answer (use the button next to the Expert's name).
2. Close the question if the information was not useful to you, but may help others. You must tell the participants why you wish to do this, and allow for Expert response.  This choice will include a refund to you, and will move this question to our PAQ (Previously Asked Question) database.  If you found information outside this question thread, please add it.
3. Ask Community Support to help split points between participating experts, or just comment here with details and we'll respond with the process.
4. Delete the question (if it has no potential value for others).
   --> Post comments for expert of your intention to delete and why
   --> You cannot delete a question with comments, special handling by a Moderator is required.

For special handling needs, please post a zero point question in the link below and include the URL (question QID/link) that it regards with details.
http://www.experts-exchange.com/jsp/qList.jsp?ta=commspt
 
Please click the Help Desk link on the left for Member Guidelines, Member Agreement and the Question/Answer process for further information, if needed.  http://www.experts-exchange.com/jsp/cmtyHelpDesk.jsp

Click you Member Profile to view your question history and keep them all current with updates as the collaboration effort continues, to track all your open and locked questions at this site.  If you are an EE Pro user, use the Power Search option to find them.  Anytime you have questions which are LOCKED with a Proposed Answer but does not serve your needs, please reject it and add comments as to why.  In addition, when you do grade the question, if the grade is less than an A, please add a comment as to why.  This helps all involved, as well as future persons who may access this item in the future to seek help.

To view your open questions, please click the following link(s) and keep them all current with updates.
http://www.experts-exchange.com/questions/Q.20094874.html
http://www.experts-exchange.com/questions/Q.20106232.html
http://www.experts-exchange.com/questions/Q.20106814.html
http://www.experts-exchange.com/questions/Q.20111967.html
http://www.experts-exchange.com/questions/Q.20119927.html
http://www.experts-exchange.com/questions/Q.20133314.html
http://www.experts-exchange.com/questions/Q.20153810.html
http://www.experts-exchange.com/questions/Q.20165493.html
http://www.experts-exchange.com/questions/Q.20171812.html
http://www.experts-exchange.com/questions/Q.20174720.html
http://www.experts-exchange.com/questions/Q.20182161.html
http://www.experts-exchange.com/questions/Q.20193520.html
http://www.experts-exchange.com/questions/Q.20201568.html
http://www.experts-exchange.com/questions/Q.20207528.html
http://www.experts-exchange.com/questions/Q.20242944.html
http://www.experts-exchange.com/questions/Q.20246105.html




PLEASE DO NOT AWARD THE POINTS TO ME.  
 
------------>  EXPERTS:  Please leave any comments regarding your closing recommendations if this item remains inactive another seven (7) days.  Also, if you are interested in the cleanup effort, please click this link http://www.experts-exchange.com/jsp/qManageQuestion.jsp?ta=commspt&qid=20274643

Moderators will finalize this question if still open in 7 days, by either moving this to the PAQ (Previously Asked Questions) at zero points, deleting it or awarding expert(s) when recommendations are made, or an independent determination can be made.  Expert input is always appreciated to determine the fair outcome.
 
Thank you everyone.
 
Moondancer
Moderator @ Experts Exchange

P.S.  For any year 2000 questions, special attention is needed to ensure the first correct response is awarded, since they are not in the comment date order, but rather in Member ID order.
Les MooreSr. Systems Engineer
CERTIFIED EXPERT
Top Expert 2008

Commented:

This question appears to be abandoned. I will allow one week before I close this question
with the following recommendation:

- points to lrmoore

if there is any objection to this recommendation then please post it here within 7 days.

thanks,

lrmoore@nw
EE Cleanup Volunteer
PAQ/refund (experts never addressed "Is there a way I can NAT port 53 tcp/udp to the other addresses using the port method you describe?")

SpideyMod
Community Support Moderator @Experts Exchange

Explore More ContentExplore courses, solutions, and other research materials related to this topic.