topic Static IP, ASA, Linksys Access Point Setup.. in Network Security

Static IP, ASA, Linksys Access Point Setup..

Oscar Castillo — Tue, 12 Mar 2019 00:55:10 GMT

Hello all,

Question, does anybody know how to do the setup a linksys behind an ASA 5505?

I have everything configured, but the router (Linksys) does not get to the internet.

Anyone with the same setup?

Project: Verizon with a Static IP ---> ASA --> Linksys Router ..

I am able to ping from the ASA to outside world, but the linksys remains with no internet.

I do live with Roomates and I need to share my internet with them. I did upgrade my service to an static IP and I am able to run the setup in the ASA, WAN Ip.

I tried many ways to do the bridge setup mode in the linksys and nothing works.

I will need appreciate your help.

Thanks.

Static IP, ASA, Linksys Access Point Setup..

Rudy Sanjoko — Fri, 01 Feb 2013 09:24:11 GMT

I assume the DHCP is enabled and the linksys is getting the ip from the ASA, are you able to ping the ASA from the linksys? is there any access list on the ASA allowing the traffic? posting the config would be helpful.

Static IP, ASA, Linksys Access Point Setup..

i.va — Fri, 01 Feb 2013 13:43:59 GMT

How are you planning to connect the Linksys router? Routed or bridged mode? Maybe this will help: link

Static IP, ASA, Linksys Access Point Setup..

Oscar Castillo — Sat, 02 Feb 2013 00:36:16 GMT

Guys, I am able to ping from the ASA to outside world, and inside ip, but when I try to browse over internet, the linksys (setup as AP) does not reach the internet.

Has been a week already with this issue.

FYI: AP I disable DHCP server and I do security setup just in the Wireless. I see that the AP gets an IP from the ASA, but cant get to internet...

ASA-VA(config)# sh run

: Saved

ASA Version 7.2(4)

hostname ASA-VA

domain-name default.domain.invalid

enable password EoP/WNlflrusvs6P2Qohmj encrypted

passwd 2KFQnbNIdI.2KYOU encrypted

names

interface Vlan1

nameif inside

security-level 0

ip address 192.168.1.1 255.255.255.0

interface Vlan2

nameif outside

security-level 0

ip address 200.241.161.34 255.255.255.0

interface Ethernet0/0

switchport access vlan 2

interface Ethernet0/1

interface Ethernet0/2

shutdown

interface Ethernet0/3

shutdown

interface Ethernet0/4

shutdown

interface Ethernet0/5

shutdown

interface Ethernet0/6

shutdown

interface Ethernet0/7

ftp mode passive

dns server-group DefaultDNS

domain-name default.domain.invalid

access-list internet extended permit ip 192.168.1.0 255.255.255.0 any

access-list inside_access_out extended permit tcp any any

access-list LAN_Traffic extended permit ip any any

access-list LAN_Traffic extended permit ip 192.168.1.0 255.255.255.0 any

access-list DMZtoInside extended permit ip any any

access-list DMZtoInside extended permit tcp any any

access-list DMZtoInside extended permit udp any any

pager lines 24

mtu inside 1500

mtu outside 1500

icmp unreachable rate-limit 1 burst-size 1

asdm image disk0:/asdm-625.bin

no asdm history enable

arp timeout 14400

nat-control

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0

access-group internet in interface inside

route outside 0.0.0.0 0.0.0.0 200.241.161.1 1

timeout xlate 3:00:00

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00

timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00

timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

aaa authentication enable console LOCAL

aaa authentication ssh console LOCAL

http server enable

http 0.0.0.0 0.0.0.0 outside

http 0.0.0.0 0.0.0.0 inside

no snmp-server location

no snmp-server contact

snmp-server enable traps snmp authentication linkup linkdown coldstart

telnet timeout 5

ssh 0.0.0.0 0.0.0.0 outside

ssh timeout 60

console timeout 0

management-access inside

dhcpd dns 8.8.8.8

dhcpd address 192.168.1.20-192.168.1.30 inside

dhcpd enable inside

username vjasssssa password ssssssssymmJ/.j encrypted privilege 15

username o0000o password 7bzKAK0o/823lc6vvc encrypted privilege 15

username afgjejejsf password ggmMHjnJdssAASuqKt encrypted privilege 15

class-map inspection_default

match default-inspection-traffic

policy-map type inspect dns preset_dns_map

parameters

message-length maximum 512

policy-map global_policy

class inspection_default

inspect dns preset_dns_map

inspect ftp

inspect h323 h225

inspect h323 ras

inspect netbios

inspect rsh

inspect rtsp

inspect skinny

inspect esmtp

inspect sqlnet

inspect sunrpc

inspect tftp

inspect sip

inspect xdmcp

service-policy global_policy global

prompt hostname context

Cryptochecksum:a9ebd2eab336dc5e1a8dc02395c3e0d2

: end

ASA-VA(config)#

Static IP, ASA, Linksys Access Point Setup..

Oscar Castillo — Sat, 02 Feb 2013 00:37:39 GMT

Yes, I am able to ping the inside interface.

Static IP, ASA, Linksys Access Point Setup..

Oscar Castillo — Sat, 02 Feb 2013 00:43:14 GMT

AP Would be..

Static IP, ASA, Linksys Access Point Setup..

James Leinweber — Sat, 02 Feb 2013 16:39:34 GMT

You don't want to try and double-NAT at both the ASA and the Linksys, so either the ASA should be in transparent mode, or the Linksys should be in bridge mode.

-- Jim Leinweber, WI State Lab of Hygiene

Static IP, ASA, Linksys Access Point Setup..

Oscar Castillo — Sun, 03 Feb 2013 13:04:54 GMT

Guys, I found some tutorial how to fix this, I would paste the link here for future reference...

-- >

http://www.techrepublic.com/blog/smbit/setting-up-a-cisco-asa-5505-firewall-with-a-wireless-router/414