Port Forwarding

[thomascw]

I'm not sure what is the best route to use for what we are attempting to do. We are taking our Websever down to due some maintainance. During this down time we want people on and outside of our network to be redirected to a page on a different sever letting them know what is going on and giving them links to resources.

Should we just forward all traffic incoming on port 80 to the new sever or is there a better way to do this?

If this is the way to do this, how would I do this using ASDM?

 

[Supergrrover]

That's exactly what you need to do. I can't walk you through it for the gui because I don't use it but for the cli -

no static (inside,outside) [External_ip] 80 [OLD_Internal_ip] 80 netmask 255.255.255.255

static (inside,outside) [External_ip] 80 [New_Internal_ip] 80 netmask 255.255.255.255

Your ACL should remain the same.



Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[thomascw]

thanks for your help.

 

[thomascw]

When entering the commands I got an error at the ^.

static (inside,outside) [External_ip] 80 [New_Internal_ip] 80 netmask 255.255.255.2 ^ 55


any idea what I did wrong? I was trying to test this between to web servers IP's of 198.206.243.236 and 198.206.243.15. before doing it in production.

thanks

 

[Supergrrover]

replace the bracketed info with your actual ips

Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[thomascw]

did that, this is what I entered,

static (inside,outside) 198.206.243.236 80 198.206.243.15 80 netmask 255.255.255.255



so what I'm tring to do is anything going to .236 web I want to go to .15 web.

 

[unclerico]

You can keep the current public IP the same, just change the internal ip like SuperG said.

Take this example. Under normal everyday operation your public IP is going to be 198.206.243.236 and it will be a statically NATted to the private IP of 192.168.20.1 so that people can view your functional website. Now, you want to bring that server down for maintenance, but you've got a standby server that you load a static HTML page stating taht the website is offline for routine maintenance. You would change the static NAT entry to reference the private iP of the standby server. In this case the standby server has an IP of 192.168.20.2. Your NAT entry would be:

static (inside,outside) tcp 198.206.243.236 [URL unfurl="true"]www 192.168.20.2[/URL] [URL unfurl="true"]www netmask[/URL] 255.255.255.255

Make sense??

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[thomascw]

thanks for all of your help.