Solved

Cisco ASA 5505 - Multiple Public IP's going to the same internal PRIVATE IP address

Posted on 2013-11-21
2
1,466 Views
Last Modified: 2014-01-07
Is there any way to configure a Cisco ASA to have (2) Public IP's point to the same internal resource?  I.E. have an FTP server available on (2) separate IP's pointing to the same internal IP address?

When I try to configure this, the CLI complains about an existing NAT and does not allow the command to be entered.
0
Comment
Question by:jkeegan123
2 Comments
 
LVL 25

Expert Comment

by:Fred Marshall
Comment Utility
It's a little unusual I should think to have a port with a public IP address "point to" a single internal IP address via NAT.  And then another doing the same thing to the same internal address.

If that's the case then I should think you would route without NAT at all.  That's a more classical router function without the embellishment of NAT.  So, packets coming in from a particular port with a public address would be routed to a port toward a particular private IP address range which would have the size of 1.
There could be multiple public ports that way and multiple routes to the private port/range.

e.g.  1.1.1.1 to `192.168.1.1/32 i.e. 255.255.255.255
and 2.2.2.2 to 192.168.1.1/32 also.
and no NAT.
0
 
LVL 12

Accepted Solution

by:
Henk van Achterberg earned 500 total points
Comment Utility
Try this (please use ASA 9.1(3) FW):

nat (outside,inside) source static any any destination static EXTIP1 FTPSERVER service ftp ftp unidirectional no-proxy-arp
nat (outside,inside) source static any any destination static EXTIP2 FTPSERVER service ftp ftp unidirectional no-proxy-arp

Open in new window


make objects for EXTIP1, EXTIP2 and FTPSERVER!
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

When I upgraded my ASA 8.2 to 8.3, I realized that my nonat statement was failing!   The log showed the following error:     %ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows It was caused by the config upgrade, because t…
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now