Exchange2K FrontEnd

[speedingwolf]

Hello,

I have an exchange 2k server (frontend) with IP address of 172.168.0.2 in the DMZ and wants to open ports so it can talk with the inside AD (10.0.10.150) and an Exchange backend server (10.0.10.151). I tried static mapping but the pix keeps telling me I can't do it. I read user posted this configuration on this forum and it shows that the FrontEnd Exchange has 2 different IPs?

FrontEnd to Active Directory
static (inside,DMZ) 172.168.0.2 10.0.10.150 netmask 255.255.255.255

FrontEnd to Backend
PixLab(config)# static (inside,DMZ) 172.168.0.2 10.0.10.2 netmask 255.255.255.255
ERROR: duplicate of existing static

Do i need to add an additional IP for the network interface on the exchange front end?

Thanks,
Mixa

 

[themut]

You can only NAT to one unique IP address otherwise there would be no way for the PIX to know where to send traffic destined to 172.168.0.2. Hope this helps!