cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
182
Views
0
Helpful
1
Replies

guest vlan

ben0000020
Level 1
Level 1

Hi, I have setup a vlan interface for our guest wifi. Our internal network uses the outside interface IP for it's NAT. I would like the guest network to use a different IP address.

If I specify the IP address to use, it does not work. If I change it to interface, it uses the outside interface IP, so I know there is no connection or ACL issue.

 

ciscoasa# sh nat
Manual NAT Policies (Section 1)
1 (Inside) to (Outside) source dynamic any interface
    translate_hits = 13501514, untranslate_hits = 535835
2 (Inside) to (Outside) source static NETWORK_OBJ_192.168.21.0_24 NETWORK_OBJ_192.168.21.0_24   destination static NETWORK_OBJ_10.10.251.0_24 NETWORK_OBJ_10.10.251.0_24 no-proxy-arp route-lookup
    translate_hits = 0, untranslate_hits = 20810
3 (GuestVLAN) to (Outside) source dynamic any EXT_outside_29
    translate_hits = 274, untranslate_hits = 0

 

EXT_outside_29 is the external IP address I want to use. I can see the translate_hits is counting the traffic, but nothing is working.

I'm sure this is something simple. Any guideance would be fantastic.

FYI, running ASA version 8.6(1)2

1 Reply 1

Jon Marshall
Hall of Fame
Hall of Fame

Is EXT_outside_29 from the same range as the outside interface IP ?

If possible could you post the full config ?

Jon

Review Cisco Networking products for a $25 gift card