Solved

cisco asa pass same port to two different servers

Posted on 2014-12-09
3
182 Views
Last Modified: 2014-12-09
I am working on transitioning from an exchange 2007 server to an exchange 2013 server and have routed email to the new server by changing my asa port forwarding to the new ip address.

However during this transition process I need outside access to the old legacy server also for OWA. Thus I need port 443 to be able to forward to both the old exchange and the new exchange server as the owa process currently is going to the new server and it is passing it on to the legacy server when the mailbox is on the old server.

This process works perfectly fine inside the network but from the outside the legacy server can not be seen.

I added the 443 rules again for the legacy server and got a warning in the nat rules about overlapping.

Bottom line is it still does not work from the outside but works fine from the inside.

So how to a get a Cisco ASA 5505 to be able to pass 443 traffic based on server name etc.

Thanks!
0
Comment
Question by:dpcsit
  • 2
3 Comments
 
LVL 33

Accepted Solution

by:
Dave Howe earned 500 total points
ID: 40489212
You can't. what you need is a box able to direct traffic based on some arbitrary content (SNI might work) and an ASA isn't anywhere near advanced enough to do that.  You are more probably looking at some sort of content load balancing, so should (probably) pass it though to a box that can do that.  There are commercial load balancers that can do this for you, or if you are looking for something free (given its a short-term need) you could pass the 443 traffic to a webserver (such as apache with mod_proxy) and use name based virtual hosting to direct the traffic at the back end to the appropriate internal host based on inbound name.
0
 
LVL 1

Author Closing Comment

by:dpcsit
ID: 40489330
Answered my question of how!
0
 
LVL 33

Expert Comment

by:Dave Howe
ID: 40489369
do give apache+mod_proxy a try though. you should be able to run that on windows, and pass the traffic selectively to your two OWS boxes depending on hostname.
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Greetings, Experts! First let me state that this website is top notch. I thoroughly enjoy the community that is shared here; those seeking help and those willing to sacrifice their time to help. It is fantastic. I am writing this article at th…
Enterprise networks where VoIP phones have been deployed frequently use port configurations that allow both a computer and an IP phone to be plugged into the same switch port but use different VLANs. On Cisco equipment I'm referring to the "native V…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question