[c-nsp] Nto1 outside translations with PIX ?

Timothy Arnold tim at uksolutions.co.uk
Tue Feb 22 04:47:06 EST 2005


I don't think you can. What you could do is create another virtual interface 
on your server and map it to the external IP?

Cheers
Tim


----- Original Message ----- 
From: "Armin Wies" <hasenhei at gmail.com>
To: <cisco-nsp at puck.nether.net>
Sent: Tuesday, February 22, 2005 9:15 AM
Subject: [c-nsp] Nto1 outside translations with PIX ?


> Hi,
>
> I wonder wether it is possible to have more than one outside address
> used for one inside address...
>
> I want to set a translation for a nameserver that, for some reason,
> needs to be accessible on two public IPs.
>
>
> I can set up
> static (dmz, outside) pu.bl.ic.ip pr.iv.ate.ip netmask 255.255.255.255
>
> But when I try to set up
> static (dmz, outside) pu.bl.ic.ip2 pr.iv.ate.ip netmask 255.255.255.255
> the PIX says:
> "ERROR: static overlaps with pu.bl.ic.ip to pr.iv.ate.ip"
>
> OK, but how can I make this possible ?
>
> You can do this with iptables and Checkpoint. I can't believe that
> this is not possible with a PIX ...
>
> Can somebody give me a hint ?
>
>
> Best regards,
> Armin
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 



-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 266.3.0 - Release Date: 21/02/2005



More information about the cisco-nsp mailing list