Home network with ASA 5505 and WAP

[gregh]

I would like to set up my ASA 5505 with one switch port port used for my wireless access point and the others set up for my home network. I do not want the WAP to be able to communication with the other inside home computers. I have set up the following VLANS

homeinside - 192.168.1.1

homewap - 10.1.1.1 (providing DHCP)

outside

When I set up the WAP in port 1 I can get an IP address when a wireless laptop connects however I cannot get out to the internet.

I was reviewing page 4-8 Chapter 4 of the Configuring Switch ports and VLAN interfaces for the Cisco ASA 5505 Adaptive Security Appliance for configuring VLAN interfaces for the base license and thought that I had a good idea of the principle.

I am not a CISCO expert so I am a little lost on what to do now. Is there something that would show me step by step how to set up the applicable menu items to allow the insidewas to connect to the internet? The book with the ASA 5505 covers the VLANS in detail but I still cannot get the WAP working correctly.

Any suggestions on what menu items I need to check to see if they are configured correctly.

[brettmilborrow]

Try looking at this page:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00804619d8.shtml#gui

[gregh]

I took a look at the referenced link. In the end I used the wizard to setup the 3 VLANS and then just added a NAT rule to allow the Wireless Access Point VLAN to the outside interface. I set the security level of both the inside home and the wap to 100 and selected the option in the wizard to not allow the wap to communication with the inside home. This solution appeared to work and the WAP cannot see the other computers on the inside VLAN but can get to the internet. Could it have been this simple of a solution or am I still missing something?

[brettmilborrow · Accepted solution]

That sounds correct. The wizard takes care of the NAT and access-lists for your setup.

Well done!