Is this config Possible?

Jan 06, 2008 1 Replies

static (inside,outside) tcp interface 443 INTERNALIP1 443 netmask



255.255.255.255 static (inside,outside) tcp interface 443 INTERNALIP2 443 netmask
255.255.255.255


access-list out2in permit tcp any interface outside eq 443


No, because in effect you're trying port forward 443/tcp to two different internal addresses. What you can do is change the external port number so they're both unique.

static (inside,outside) tcp interface 443 INTERNALIP1 443 netmask

255.255.255.255 static (inside,outside) tcp interface 4443 INTERNALIP2 443 netmask 255.255.255.255

access-list out2in permit tcp any interface outside eq 443 access-list out2in permit tcp any interface outside eq 4443

Note, that you'll only be able to browse to one address using https (with the first default 443 mapping) without including the outside port.

Cheers,

Matt

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required