s1mwat
asked on
CAN I USE 2 NAT PUBLIC ADDRESS FOR ONE PRIVATE ADDRESS ???
I use a cisco PIX to NAT private IP addresses to public addresses. My boss has asked if it is possible to assign two NAT Public addresses to one private address where a different tcp port may determine which NAT address is used, is this possible on a PIX firewall or a ASA appliance ???
Thanks
Thanks
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Sorry, I was thinking IOS. Shouldn't require a route-map, only ACLs. I haven't tested this out myself but try something like:
access-list NAT1 permit tcp host 10.1.1.10 any eq 53
access-list NAT2 permit tcp host 10.1.1.10 any eq 80
nat (inside) 10 access-list NAT1
nat (inside) 10 access-list NAT2
global (outside) 10 150.10.10.1
global (outside) 11 150.10.10.2
access-list NAT1 permit tcp host 10.1.1.10 any eq 53
access-list NAT2 permit tcp host 10.1.1.10 any eq 80
nat (inside) 10 access-list NAT1
nat (inside) 10 access-list NAT2
global (outside) 10 150.10.10.1
global (outside) 11 150.10.10.2
ASKER