Multiple bidirectional NATs with multiple public IPs

[cstech]

Hello,

I have /26 public IP addresses (164.67.80.65 - 164.67.80.126).  I bound ethernet 1/1 to 164.67.80.77/24.  Then I created a bidirectional NAT connecting 164.67.80.77 to 192.168.1.77.  Works great.  Now I want to setup a second bidirectional NAT: 164.67.80.78 to 192.168.1.78

Question:

Can I do this without using just the one external interface?  Can I "add" 164.67.80.78/24 to interface ethernet 1/1, eventhough it already has an address on the same subnet 164.67.80.77/24?

Thank you,

Chris

[HULK]

Hello Chris,

As per my understanding, you cannot configure same subnet IP address in multiple interfaces. A firewall is supposed to segregate different broadcast domain. So, you can not tag same broadcast domain into 2 interfaces.

Thanks

[HULK · Accepted solution]

One moment , you need not to configure 164.67.80.78/xx ip on an another interface. Once you will configure a NAT rule for IP address  164.67.80.78, the PAN firewall is intelligent enough to do PROXY ARP for that IP address since the interface is already configured with that subnet.

[cstech]

Hulk,

You say "same subnet IP address in multiple interfaces" but I am not talking about multiple interfaces.  I am talking about only one interface: "ethernet1/1".

Are you saying that, as per your understanding, it is impossible to configure multiple IP address on the same subnet to a single interface?

Thank you again,

Chris

[HULK]

Please ignore my first update.

You only need to configure a NAT rule for IP address 164.67.80.78. Everything else will be taken care by PAN firewall. ( you need not to configure that .78 IP to a physical interface).

Thanks

[cstech]

Thanks again, works great!

[HULK]

You are welcome sir.