NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

SSBN743's avatar
SSBN743
Aspirant
Oct 02, 2017

Network Conceptual Problem

Hey all,   Just need a little help from the network brains out there.  I am a lowly CCNA, so I setup my home network easily enough - but I'm having some problems figuring out how to inspect all tra...
Features
Security
Share
TheEther's avatar
TheEther
Guru
Oct 02, 2017
I think you should put the R7000 behind the ASA. If you like, set it into AP mode to avoid creating another subnet. Then forward the necessary port(s) for public share access.
  • SSBN743's avatar
    SSBN743
    Aspirant
    Oct 03, 2017

    You know, I can't believe I didn't think of that - so thank you, I complete forgot about the other setup options.

    However, it didn't work.  I moved the R7000 inside the ASA and am successful at using the access point and getting all traffic (Wi-Fi and internal) inspected by the ASA - but I can't access the ReadyShare device.  

    The AP setup option only lets allows you to setup an admin password and a Wi-Fi SSID - and even if I could somehow setup the ReadyShare device, when the device is internal, it doesn't get a public IP as the ASA NAT's between public and private.  So, I did consider configuring the R7000 for Bridge mode, and add it to the internal VLAN, but I think I'm going to have the same problem with a non-public routable address to reach the ReadyShare.

     

    So, yeah, pretty frustrating that I can't just leave the R7000 outside the ASA and add a static route in, 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255 and solve the entire problem.