PIX Config External IP to multiple Internal IP

[w33mhz]

I have a PIX 515 and I am wondering if I can staticly assign an External IP Address to multiple Internal IP Addresses. I currently have several external mapped to internals, but now I want to have an external mapped to 2 different internals and set a metric for each of the 2 internal ip addresses.

 

[rodjor]

Do each of these require different ports to be assigned to them? Here is one way to try.

static (inside, outside) tcp 10.10.10.10 80 192.168.1.10 80 netmask 255.255.255.255

static (inside, outside) tcp 10.10.10.10 25 192.168.1.10 25 netmask 255.255.255.255

 

[w33mhz]

No they need to be the same port. I have done what you are suggesting before on accident before and it didn't seem to work.

 

[brianinms]

You can't map an external port to the same port on multiple inside hosts.

 

[w33mhz]

well I that is what I thought but I just wasn't sure. It would be kind of nice if I could though. Thanks.

 

[dialtonebone]

w33mhz, can you tell us the application/reasoning behind trying to do this?

 

[w33mhz]

Well I have 2 spam filter appliances, and I the models that I have do not support clustering/failover so I wanted to setup a failover with my PIX. I will be getting a load balancer in the near future, but I wanted something for now until that happens. What I will have to do is setup another MX record with my DNS host and use a metric that way. I was just trying to avoid doing that is all.