Guest\Public_Wifi Interface needs access to internal resource via external IP

[carlos.garza]

I've got an ASA with two "outside" interfaces and twelve "inside" interfaces.

One of those twelve inside interfaces is called "Guest_Wifi" and all it has access to is the internet. Some of the resources it needs access to are resources on another inside interface called "Web" that are also publicly accessible.  DNS for the "Guest_Wifi" network is being provided by a 3rd party (OpenDNS).

How can I allow users on the "Guest_Wifi" network access to our resources in the "Web" interface via their external IP addresses?

Thank you!

[Shivapramod M · Accepted solution]

Hi Carlos,

You can create a static NAT between the guestwifi and web similar to your outside to web, this should work.

Thanks,

Shivapramod M

[Rishabh Seth · Accepted solution]

Hi Carlos,

Adding to Shivpramod's suggestion, ensure you create appropriate ACLs to permit traffic between interfaces with different security levels.

HTH,

R.Seth