topic Hi Carlos, in Network Security

Guest\Public_Wifi Interface needs access to internal resource via external IP

carlos.garza — Tue, 12 Mar 2019 06:49:28 GMT

I've got an ASA with two "outside" interfaces and twelve "inside" interfaces.

One of those twelve inside interfaces is called "Guest_Wifi" and all it has access to is the internet. Some of the resources it needs access to are resources on another inside interface called "Web" that are also publicly accessible. DNS for the "Guest_Wifi" network is being provided by a 3rd party (OpenDNS).

How can I allow users on the "Guest_Wifi" network access to our resources in the "Web" interface via their external IP addresses?

Thank you!

Hi Carlos,

Shivapramod M — Tue, 03 Nov 2015 01:12:14 GMT

Hi Carlos,

You can create a static NAT between the guestwifi and web similar to your outside to web, this should work.

Thanks,

Shivapramod M

Hi Carlos,

Rishabh Seth — Tue, 03 Nov 2015 01:19:03 GMT

Hi Carlos,

Adding to Shivpramod's suggestion, ensure you create appropriate ACLs to permit traffic between interfaces with different security levels.

HTH,

R.Seth