[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Can you static NAT a single public IP to two inside IPs using PIX 6.2 OS

Posted on 2009-02-22
4
Medium Priority
?
576 Views
Last Modified: 2012-05-06
I would like to add a new service in addition to the currently running. I cannot use the same server and IP since the system is in production and cannot be taken down. I want to run the service on a new box with a new inside IP. The problem is I do not have a spare public IP to map to this new service. Can I use the publi IP used by the old service and statically NAT it to two inside IPs.  My PIX OS is 6.2
0
Comment
Question by:ZaheerF
  • 2
  • 2
4 Comments
 
LVL 2

Expert Comment

by:Highspade
ID: 23708757
You would need to change the incoming outside port for the second computer.

I have ssh mapped to port 4000 on the outside and switching back to 23 on the inside.

static (inside,outside) tcp interface 4000 10.0.0.8 ssh netmask 255.255.255.255

You would then need to allow the external port on the access list. In this case tcp 4000
0
 

Author Comment

by:ZaheerF
ID: 23708817
Do u mean that I have static NAT like the following

Static (Inside,outside) tcp
static (inside,outside) tcp 211.10.10.10  192.168.1.50 netmask 255.255.255.255 0 0 eq 9201
static (inside,outside) tcp 211.10.10.10  192.168.1.51 netmask 255.255.255.255 0 0 eq 9211

Like mapping a single public IP to two private IP each on different ports
Can I do this

0
 

Author Comment

by:ZaheerF
ID: 23708878
Sorry I miss typed the commands. It should be like the following.

static (inside,outside) tcp 211.10.10.10 9201 192.168.1.50 4001 netmask 255.255.255.255 0 0
static (inside,outside) tcp 211.10.10.10 9202 192.168.1.51 4002 netmask 255.255.255.255 0 .0
0
 
LVL 2

Accepted Solution

by:
Highspade earned 2000 total points
ID: 23708954
Correct, you would need to change the external port, but are not required to change the internal mapping -however you are certainly able to do so if you wish.
0

Featured Post

Vote for the Most Valuable Expert

It’s time to recognize experts that go above and beyond with helpful solutions and engagement on site. Choose from the top experts in the Hall of Fame or on the right rail of your favorite topic page. Look for the blue “Nominate” button on their profile to vote.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are two basic ways to configure a static route for Cisco IOS devices. I've written this article to highlight a case study comparing the configuration of a static route using the next-hop IP and the configuration of a static route using an outg…
Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

872 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question