[c-nsp] ASA Static Translations / DNS Doctoring

Clue Store cluestore at gmail.com
Fri Jul 17 12:46:51 EDT 2009


Hi All,

I'm trying to do DNS doctoring on an asa and for specific reasons I need to
map several different (public) outside IP's the one inside ip as shown
below.

*static (inside,outside) 208.x.x.25 192.168.100.10 netmask 255.255.255.255
dns*
*static (inside,outside) 208.x.x.26 192.168.100.10 netmask 255.255.255.255
dns*
**
However, upon entering the second rule, the asa says "ERROR: duplicate of
existing static". I realize this is for a one to one translation. As I am
not an expert with the ASA, does anyone know how I can accomplish this in a
different manor??

My only other option is to point all of my domains to the same (public)
outside IP, but this is my LAST option as it breaks alot more things that
would take alot more time to fix. Any help is appeciated.

Thanks,
Clue


More information about the cisco-nsp mailing list