One private IP NAT to multiple public IPs?

I have a requirement to setup a network so that an internal server communicates with outside world through different WAN networks. I have three separate WAN connections terminated on a single Cisco 6500. The internal network also connects to the same switch.

External VLANs: Ingress, Egress and Management Internal VLAN: Internal Requirements:

Management traffic can only talk to the internal server(s) via Management WAN;
Application traffic can only talk to the internal server(s) via Ingress WAN;
Outbound traffic originated from internal servers has to go through Egress WAN;
Internal servers use private IP addresses

For example, I have: Servers on Internal VLAN:

10.0.0.2 10.0.0.3 10.0.0.4

The mangement traffic (i.e. SNMP, ssh) uses the following public IPs to reach each server:

5.5.5.2 5.5.5.3 5.5.5.4

The application traffic (i.e. www, ftp) uses the following public IPs to reach each server:

6.6.6.2 6.6.6.3 6.6.6.4

The traffic initiated from the servers uses the following public IPs to access the Internet:

7.7.7.2 7.7.7.3 7.7.7.4

Given the requirements above, how do I design/configure my switch to achieve the goal? I've done some searches on the forum with no luck. Please kindly advise.

Jack,

I think you've got an interesting problem here. At first sight it seems relatively simple but on a second look it becomes rather tricky. Unfortunately there is insufficient information to provide a design, although here are a couple of points you could consider.

Beyond understanding the feature set of the Cisco 6500, the key areas for consideration is how to differentiate the traffic flows and the need to define return paths for each traffic type.

If the traffic can be segregated based on source and destination IP address it may be possible to use static routes. More specific routes would be chosen to route traffic for the management and Ingress return paths; a default route would route traffic through Egress link.

If the traffic can be differentiated based on source/dest. ports or protocols then Policy Based Routing can complement the static IP route technique above.

Alternatively, if the applications can be configured to use multiple IP addresses on a single NIC, the problem may be simplified.

A detailed requirements capture and traffic profile should provide some of the answers and a direction in which to develop the design.

==================== Joe Igneous Networks Technical Director Network services for merging companies