2 Public IP mapped to a Single Internal address

[mudvayne15]

Hi All,

I have a question about NAT'ng multiple public IPs in PAN to a single host. 
We plan to migrate the FTP server to the public IP below (2nd DNAT)

(DNAT) - This is the current policy where we use it as an SSH server, does not have any specific ports
SSH server 191.143.124.32 ---> Mapped to 172.30.50.108

(DNAT) - This should be a new policy to use it as an FTP server. 
FTP server 191.143.124.33 ---> Mapped to 172.30.50.108:21

My question is, will this work and do I still need to port forward it to Port 21 or leave it as default on the NAT destination rule?

Thank you in advance. 

[TomYoung · Accepted solution]

Hi @mudvayne15 ,

It will work, but you need to put the more specific rule with the port 1st since the policy flows top down and picks the 1st match.

Thanks,

Tom