Solved

Cisco ASA routing two external networks

Posted on 2015-01-29
7
20 Views
Last Modified: 2015-11-25
Hi,

I have a Cisco ASA 5510 with 4 NICS. They are:
E0/0 - MPLS (172.28.90.1/24) connect to MPLS router with IP 172.28.90.2
E0/1 - Internal (172.28.0.0/22)
E0/2 - ExtDSL (192.168.0.1/24) connected to BT ADSL router with IP 192.168.0.1
E0/3 - GuestWifi (172.16.0.1/22)

I would like to NAT the Guest Wifi over the  ExtDSL Ethernet connection.

However in my static routes I have 0.0.0.0 0.0.0.0 going to the E0/0 MPLS connection.

Is there anyway to NAT the E0/3 Guestwifi traffic out of the E0/2 ExtDSL connection ?

Thanks,
0
Comment
Question by:bhangrageeza
  • 4
  • 3
7 Comments
 
LVL 57

Expert Comment

by:Pete Long
ID: 40578619
yes, the commands would depend on your OS though, what version are you running? (show version)

Pete
0
 

Author Comment

by:bhangrageeza
ID: 40579166
Thanks for the reply Pete

ASA Version: 8.4(1)
ASDM Version 6.4(1)
0
 
LVL 57

Accepted Solution

by:
Pete Long earned 500 total points
ID: 40579548
OK

object network OBJ-NAT-ALL-WIRELESS
 subnet 172.16.0.0 255.255.0.0
nat (GuestWifi ,ExtDSL) dynamic interface

should do :)
0
Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

 

Author Comment

by:bhangrageeza
ID: 40579643
Just set this up, and it's still not working.

Do I need to add in anything else ?
0
 

Author Comment

by:bhangrageeza
ID: 40579663
ASA-NAT-Rule.jpg
ASA-Ping.jpg
I have carried out a ping using command line interface going out of the ExtDSL line, and it comes back with packet loss. Do I need to add in a route somewhere ?
0
 
LVL 57

Expert Comment

by:Pete Long
ID: 40582356
Do you have any ACL applied to the wireless interface?
0
 

Author Closing Comment

by:bhangrageeza
ID: 41311297
didn't fix the issue
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Suggested Solutions

Overview The Cisco PIX 501, PIX 506e, ASA 5505 and ASA 5510 (most if not all of this information will be relevant to the PIX 515e but I do not have a working configuration handy to verify the validity) are primarily used within small to medium busi…
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now