I am working on an OSSEC deployment where I will have multiple agents behind 1 public IP. Below is an example of the setup
Those IPs NAT to 1 public IP (220.127.116.11)
Then 18.104.22.168 talks to the public OSSEC server on 22.214.171.124
I've read some OSSEC documentation talking about NAT here, but it doesn't tell me exactly what I need to know. Their example is using an entire /24 subnet and mine will mainly have multiple agents to only 1 public IP. With the setup so far, I brought Agent1 online fine and it is communicating to the OSSEC server. However Agent2 continues to fail trying to connect to 126.96.36.199. Even though when I added the key, I had the correct name for it, so I know it talked to the portal at least once for that information. I'm assuming it's just getting confused with the multiple keys to 1 public IP. I basically want to know if this is possible and/or if I'm just overlooking something simple. Any help would be greatly appreciated.