[c-nsp] Nto1 outside translations with PIX ?

Armin Wies hasenhei at gmail.com
Tue Feb 22 04:15:12 EST 2005


Hi,

I wonder wether it is possible to have more than one outside address
used for one inside address...

I want to set a translation for a nameserver that, for some reason,
needs to be accessible on two public IPs.


I can set up
static (dmz, outside) pu.bl.ic.ip pr.iv.ate.ip netmask 255.255.255.255

But when I try to set up
static (dmz, outside) pu.bl.ic.ip2 pr.iv.ate.ip netmask 255.255.255.255
the PIX says:
"ERROR: static overlaps with pu.bl.ic.ip to pr.iv.ate.ip"

OK, but how can I make this possible ?

You can do this with iptables and Checkpoint. I can't believe that
this is not possible with a PIX ...

Can somebody give me a hint ?


Best regards,
Armin


More information about the cisco-nsp mailing list