guest vlan

Unanswered Question
Mar 18th, 2014
User Badges:

Hi, I have setup a vlan interface for our guest wifi. Our internal network uses the outside interface IP for it's NAT. I would like the guest network to use a different IP address.

If I specify the IP address to use, it does not work. If I change it to interface, it uses the outside interface IP, so I know there is no connection or ACL issue.


ciscoasa# sh nat
Manual NAT Policies (Section 1)
1 (Inside) to (Outside) source dynamic any interface
    translate_hits = 13501514, untranslate_hits = 535835
2 (Inside) to (Outside) source static NETWORK_OBJ_192.168.21.0_24 NETWORK_OBJ_192.168.21.0_24   destination static NETWORK_OBJ_10.10.251.0_24 NETWORK_OBJ_10.10.251.0_24 no-proxy-arp route-lookup
    translate_hits = 0, untranslate_hits = 20810
3 (GuestVLAN) to (Outside) source dynamic any EXT_outside_29
    translate_hits = 274, untranslate_hits = 0


EXT_outside_29 is the external IP address I want to use. I can see the translate_hits is counting the traffic, but nothing is working.

I'm sure this is something simple. Any guideance would be fantastic.

FYI, running ASA version 8.6(1)2

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Jon Marshall Tue, 03/18/2014 - 08:02
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Is EXT_outside_29 from the same range as the outside interface IP ?

If possible could you post the full config ?



This Discussion

Related Content