ASA5505 and Netgear WG103AP cant get working

Posted on 2011-04-28
Last Modified: 2013-12-27

I'm struggling with this one.

I have a CISCO ASA 5505 with ASA 8.2 image.

I've setup a DMZ interface on Vlan10 on the ASA
Assigned Ports 6&7 to Vlan10
Interface IP
DHCP Scope active from ASA to DMZ Interface

Plugged in Netgear Wg103 and its gets an IP Address - Great!

Assign a static IP to the Netgear AP and continue to setup Wireless SSID Profile.
Profile configured and assigned to Vlan10 via Netgear menus.

The problem is when I connect to the AP using my laptop I get limited or no connectivity.

But when I connect my laptop directly into port 6 or 7 on the ASA I get a DHCP address and out on the Internet.

What am I doing wrong?

Should I set the wireless profile to be on Vlan10? or should I leave it on Vlan1
I'm not doing any Vlan Trunking, this is a small office and I have plenty of spare ports on the ASA.

Any ideas?



Question by:mf_read
    LVL 9

    Expert Comment

    What license feature do you have enabled on the 5505?  For full DMZ functionality you need the "Security Plus" license.  The output of "show version" will give us this information.  If you have the Base version, then you will not be able to configure the DMZ to be able to communicate to both the inside network and the outside network.  It will be able to communicate with one or the other, but not both.

    Author Comment

    Thanks for the reply, we do have the full Advanced IP Security Plus device.
    I think its a Vlan issue myself, but I'm not sure.
    LVL 9

    Accepted Solution

    If you've assigned VLAN 10 to the ASA ports and it shows it in the config like this:
    "switchport access vlan 10"
    Then it is sending the traffic out those ethernet ports untagged (i.e. vlan 1).  So you you should not configure the netgear AP to use any VLANs in that case.  It should be configured for VLAN 1 or no VLANs.

    You might also confirm that the netgear AP works on another network with that configuration as well.

    Author Comment

    Thanks again for the reply, I think you are right, the AP need to be left on VLAN1.
    I'll give that a try and let you know.
    LVL 9

    Expert Comment

    Any update on whether that solved the problem or not?  Thanks.

    Author Closing Comment

    Sorry for the late response with this, I can say that I quite simply put the AP on VLAN1 and connected it to VLAN10 configured the switch port for Untagged on that Vlan and all is working well, Thanks again for your clarification.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    With the purchase of CloudCommand by Comcast customers are left in a bind as subscriptions expire and render the AP's disabled. The following will explain how to flash your Ubiquiti AP's with CloudCommand firmware back to Ubiquiti firmware. HOWTO…
    DECT technology has become a popular standard for wireless voice communication. DECT devices are not likely to be affected by other electronic devices and signals because they operate in a separate frequency-band.
    This Micro Tutorial will show you how to maximize your wireless card to its maximum capability. This will be demonstrated using Intel(R) Centrino(R) Wireless-N 2230 wireless card on Windows 8 operating system.
    Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now