Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Community Member

guest vlan

Hi, I have setup a vlan interface for our guest wifi. Our internal network uses the outside interface IP for it's NAT. I would like the guest network to use a different IP address.

If I specify the IP address to use, it does not work. If I change it to interface, it uses the outside interface IP, so I know there is no connection or ACL issue.


ciscoasa# sh nat
Manual NAT Policies (Section 1)
1 (Inside) to (Outside) source dynamic any interface
    translate_hits = 13501514, untranslate_hits = 535835
2 (Inside) to (Outside) source static NETWORK_OBJ_192.168.21.0_24 NETWORK_OBJ_192.168.21.0_24   destination static NETWORK_OBJ_10.10.251.0_24 NETWORK_OBJ_10.10.251.0_24 no-proxy-arp route-lookup
    translate_hits = 0, untranslate_hits = 20810
3 (GuestVLAN) to (Outside) source dynamic any EXT_outside_29
    translate_hits = 274, untranslate_hits = 0


EXT_outside_29 is the external IP address I want to use. I can see the translate_hits is counting the traffic, but nothing is working.

I'm sure this is something simple. Any guideance would be fantastic.

FYI, running ASA version 8.6(1)2

Everyone's tags (3)
Hall of Fame Super Blue

Is EXT_outside_29 from the

Is EXT_outside_29 from the same range as the outside interface IP ?

If possible could you post the full config ?


CreatePlease to create content