Multiple Addresses in the same ethernet interface

[adiazm]

Hello everyone.

I need to publish 2 webservers (192.168.23.10 and 192.168.23.11), both located inside my LAN (trusted zone) through 2 different public IP addresses (200.111.111.114 and 200.111.111.115). This is the configuration:

admin@PA-500# show network interface ethernet ethernet1/1
ethernet1/1 {
  layer3 {
    ipv6 {
      neighbor-discovery {
        router-advertisement {
          enable no;
        }
      }
    }
    ip {
      200.111.111.114/28;
      200.111.111.115/28;
    }
    interface-management-profile Ping-Only;
  }
  comment "Conectada a Level3";
  lacp {
    port-priority 32768;
  }
}

When I set these IP addresses in my ethernet interface ethernet1/1 and commit, I get this error:

In virtual-router default: address 200.111.111.115/28 on interface ethernet1/1 has overlapping subnet with address 200.111.111.114/28 on interface ethernet1/1.(Module: routed)
Commit failed

How can I set this two ip addresses on the same interface?

thanks in advance and best regards!

[pankaku · Accepted solution]

Try giving IP as follows:

200.111.111.114/28

200.111.111.115/32

However it is not required to assign ip address on interface for Destination NAT

[adiazm]

Thank you very much, Pakumar... 

Problem solved!

best regards

[TheNewGuy]

This solution also works well when moving from another vendors VRRP solution where some clients have the actual router IP instead of the VRRP address. Adding the secondary host /32 ip address to the interface allows the incorrectly clients to work until their gateways are updated correctly.