static (inside,outside) tcp interface 443 INTERNALIP1 443 netmask
255.255.255.255 static (inside,outside) tcp interface 443 INTERNALIP2 443 netmask
255.255.255.255
access-list out2in permit tcp any interface outside eq 443
static (inside,outside) tcp interface 443 INTERNALIP1 443 netmask
access-list out2in permit tcp any interface outside eq 443
No, because in effect you're trying port forward 443/tcp to two different internal addresses. What you can do is change the external port number so they're both unique.
static (inside,outside) tcp interface 443 INTERNALIP1 443 netmask
255.255.255.255 static (inside,outside) tcp interface 4443 INTERNALIP2 443 netmask 255.255.255.255access-list out2in permit tcp any interface outside eq 443 access-list out2in permit tcp any interface outside eq 4443
Note, that you'll only be able to browse to one address using https (with the first default 443 mapping) without including the outside port.
Cheers,
Matt
Have something to add? Share your thoughts — no account required.
Ask the community — no account required