PIX static translation question

Posted on 2005-05-01
Last Modified: 2013-11-16
I'm configuring a PIX, and have come across something I have never seen before.  The requirement is to static two seperate public addresses to the same internal address...

So for example:

static (inside,outside) netmask 0 0


static (inside,outside) netmask 0 0

PDM complains about this, calling it a duplicate entry.  Is this supported?  I know sometimes PDM complains about things that actually will work in the CLI.  This is a web server that uses host headers, and it's a config that apprarently is working on a watchguard firebox.
Question by:MBIstephen
    LVL 2

    Accepted Solution

    Thats not supported. The static command maps one internal ip to one external.  This command overrides the nat/pat statement
    so the internal ip will always use the public ip when goin to the internet.  Thats why you cant use 2 public for the same internal ip.

    Cant you configure the nic on the client to use another ip?
    LVL 79

    Assisted Solution

    martyboy is right. You cannot assign two public ips to the same private IP, whether you try to use the GUI or the CLI. It ain't gonna happen.

    However, if the private IP system is a Windows machine, you can simply assign it another private IP in the same subnet and map the two public IP's to the two private IP's that belong to the same server/host.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Is Threat Intelligence?

    Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

    If you have an ASA5510 then this sort of thing would be better handled with a CSC Module, however on an ASA5505 thats not an option, and if you want to throw in a quick solution to stop your staff going to facebook during work time, then this is the…
    This article assumes you have at least one Cisco ASA or PIX configured with working internet and a non-dynamic, public, address on the outside interface. If you need instructions on how to enable your device for internet, or basic configuration info…
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now