Improve company productivity with a Business Account.Sign Up

x
?
Solved

Cisco ASA routing two external networks

Posted on 2015-01-29
7
Medium Priority
?
31 Views
Last Modified: 2015-11-25
Hi,

I have a Cisco ASA 5510 with 4 NICS. They are:
E0/0 - MPLS (172.28.90.1/24) connect to MPLS router with IP 172.28.90.2
E0/1 - Internal (172.28.0.0/22)
E0/2 - ExtDSL (192.168.0.1/24) connected to BT ADSL router with IP 192.168.0.1
E0/3 - GuestWifi (172.16.0.1/22)

I would like to NAT the Guest Wifi over the  ExtDSL Ethernet connection.

However in my static routes I have 0.0.0.0 0.0.0.0 going to the E0/0 MPLS connection.

Is there anyway to NAT the E0/3 Guestwifi traffic out of the E0/2 ExtDSL connection ?

Thanks,
0
Comment
Question by:bhangrageeza
  • 4
  • 3
7 Comments
 
LVL 58

Expert Comment

by:Pete Long
ID: 40578619
yes, the commands would depend on your OS though, what version are you running? (show version)

Pete
0
 

Author Comment

by:bhangrageeza
ID: 40579166
Thanks for the reply Pete

ASA Version: 8.4(1)
ASDM Version 6.4(1)
0
 
LVL 58

Accepted Solution

by:
Pete Long earned 1000 total points
ID: 40579548
OK

object network OBJ-NAT-ALL-WIRELESS
 subnet 172.16.0.0 255.255.0.0
nat (GuestWifi ,ExtDSL) dynamic interface

should do :)
0
Get Cisco Certified in IT Security

There’s a high demand for IT security experts and network administrators who can safeguard the data that individuals, corporations, and governments rely on every day. Pursue your B.S. in Network Operations and Security and gain the credentials you need for this high-growth field.

 

Author Comment

by:bhangrageeza
ID: 40579643
Just set this up, and it's still not working.

Do I need to add in anything else ?
0
 

Author Comment

by:bhangrageeza
ID: 40579663
ASA-NAT-Rule.jpg
ASA-Ping.jpg
I have carried out a ping using command line interface going out of the ExtDSL line, and it comes back with packet loss. Do I need to add in a route somewhere ?
0
 
LVL 58

Expert Comment

by:Pete Long
ID: 40582356
Do you have any ACL applied to the wireless interface?
0
 

Author Closing Comment

by:bhangrageeza
ID: 41311297
didn't fix the issue
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Considering cloud tradeoffs and determining the right mix for your organization.
This article is about building a VRF-Aware site to site VPN tunnels in Cisco CSR1000V router with IOS XE. There are two VRF-Aware Policy Based IPsec VPN tunnels configured on CSR1000V router one with NAT and another without NAT.
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

589 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question