Re: Cisco ASA: Nating SMTP traffic to a second public IP

On the ASA it is possible.

Create an ACL matching SMTP from that host out.

Create another Nat entry matching that ACL and set it to use another outgoing Nat IP (2) for example

I can send configs later on how to do it

CCIE # 23962 (SP)

Sent from my iPhone

> On 20 Feb 2014, at 7:52 PM, Charlie CA <spycharlies_at_gmail.com> wrote:
>
> Hi Experts, was wondering if this is even possible on a Cisco ASA or
> possibly someone could give me a hint.
>
>
> I have a scenario here whereby, I would want all my SMTP traffic (SMTP
> Server IP 192.168.10.1) to go through a second public IP (assume 1.1.1.2),
> while all internet traffic continues to go through the primary IP (1.1.1.1).
>
>
> A quick solution would have been to only permit the SMTP server from
> sending smtp but this is not possible as we have a couple of mobile devices
> doing push email; so just permit only the smtp server would be a nightmare.
>
> I know ASA can't do policy routing, is this possible?
>
>
> Thanks
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Thu Feb 20 2014 - 19:57:33 ART