problem with cisco and windows 2003

[rassoulghaznavi]

Hi Guys ,
I have a windows 2003 server behind a cisco router and I have two internet lines connected to this router .
(ISP 1 with dialer 0 and ISP 2 with dialer 1)
I have inside static nat on router to my server which is a web and mail server .
Server has got two different IP addresses :
192.168.1.10
192.168.1.11
and we have like these NAT commands :
ip nat inside source static tcp 192.168.1.10 443 interface dialer 0 443 overload
ip nat inside source static tcp 192.168.1.11 443 interface dialer 1 443 overload

problem is that only one of these NATs will work at the same time , it means we can not use both lines to connect to port 443 on server , only one of them will work !
we don't have this problem with other servers witch has got the same configurations !

Can anyone advice please ?

 

[ADB100]

What you are attempting will not work and I doubt you have this configured elsewhere. Think about the logic of what you are trying to do - map the same outside address/port number to different inside hosts? It won't work for the same port number. You could do this:

ip nat inside source static tcp 192.168.1.10 443 interface dialer 0 443 overload
ip nat inside source static tcp 192.168.1.11 443 interface dialer 1 8443 overload

And then instead of hitting the 2nd server on port 443 use 8443 which will map to 443 or even change the default SSL port on the 2nd server to be 8443 and change the NAT statement to reflect it (ip nat inside source static tcp 192.168.1.11 8443 interface dialer 1 8443 overload).

HTH

Andy