secondary ip on outside interface of cisco pix 501
Posted on 2004-10-05
Ok, I have two servers that are behind a pix 501. They are both web servers, and both require port 80. I have one working fine, but the other is giving me problems. What I would like to do is setup a secondary ip address on the outside interface of the pix, then port forward 80 to the inside servers, like so:
internet -> public ip 220.127.116.11:80 -> pix -> private ip 10.1.1.2:80
internet -> public ip 18.104.22.168:80 -> pix -> private ip 10.1.1.3:80
I have two sequential ip's available, but I have been unable to determine how to configure the pix to use two ip's on the outside interface. I have found references to the command:
ip address x.x.x.x netmask x.x.x.x secondary
but this does not work on the pix - it just gives an error.
The documentation mentions that this pix supports both pat and nat, so I'm pretty sure it supports multiple outside ip's.
Does anybody know how to make this work?
Thanks in advance