This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

2nd Wireless network as well as default.

I have a wireless network working well. With a Wireless zone, a physical port 3 and a DHP range.

I've created a 2nd Guest-Wireless network, with a Guest-Wireless zone, a WiFi interface (with a static ip address) and it's own DHCP range.

*I have added this Guest Zone and Guest network as Sources in my existing/working firewall rule*.

Mobile clients can join the Guest Wireless, get a Guest Wireless IP address but cannot surf the internet.

What am I missing?

Many thanks in advance

This thread was automatically locked due to age.

Parents

0 FloSupport over 6 years ago

Hi Tam Ben-Jusu

Is the correct firewall rule matching to this Guest Wireless traffic? (Check via Packet Capture)

Regards,
Cancel
Vote Up 0 Vote Down

Cancel
0 Tam Ben-Jusu over 6 years ago in reply to FloSupport

Thanks FloSupport,

I have the same firewall rule for the Guest wireless as the existing working wireless.

In that, I have added the guest wireless into the 'Source Zone' and 'Source Networks and Devices' in the Firewall > Edit Rule.

Does the guest Wireless have to be bound or routed to an interface?
Cancel
Vote Up 0 Vote Down

Cancel
0 FloSupport over 6 years ago in reply to Tam Ben-Jusu

Thanks for following up!

That shouldn't be the case. Would it be possible for you to enable the support access tunnel on your appliance and PM me with the ID so I can take a look?

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel
0 Tam Ben-Jusu over 6 years ago in reply to FloSupport

Many thanks FloSupport,

I think I have it working but I'm not sure how.??!!

I created a new Zone ICStest (1).

I created a Wireless Network ICSGuest (2) which created a wireless interface.

I then put that interface in the existing WiFi zone (3) - not the newly created ICStest zone.!!

I then added the new 'Zone' and 'Network' to the WiFi Firewall rule, traffic flowed.

I'm confused, as the ICSguest is listed as a Separate Zone (4) and without creating that new zone I couldn't group it with the existing (Bridge to AP LAN) Wireless Group, but I didn't put it in that zone, icsguest is in the original zone.??

Many thanks for all your help.
Cancel
Vote Up 0 Vote Down

Cancel
0 FloSupport over 6 years ago in reply to Tam Ben-Jusu

Hi Mathew,

Thanks for following up, and i'm glad to hear you were able to resolve it.

I'm a little bit confused to how your current setup looks like and why your previous attempt didn't work (guest network wasn't being matched to your configured firewall rule). I'd still like to take a look at your configuration via support tunnel for a closer look to provide you with a better explanation.

Regards,
Cancel
Vote Up 0 Vote Down

Cancel
0 Tam Ben-Jusu over 6 years ago in reply to FloSupport

Apologies Flosupport,

I have managed to get the guest wireless into the WiFi zone and working but users cannot get to the Captive Portal.?!

Admin on port 4444 still works but 8090 does not.

Any ideas?

Could we still support tunnel?

Many thanks as always
Cancel
Vote Up 0 Vote Down

Cancel
0 Tam Ben-Jusu over 6 years ago in reply to Tam Ben-Jusu

Sorry, I should add, Captive Portal does work from the LAN network and default wireless network, just not from the new guest network.

If I turn Match Known Users off when joined to the guest network traffic flows.
Cancel
Vote Up 0 Vote Down

Cancel
0 FloSupport over 6 years ago in reply to Tam Ben-Jusu

Hi Mathew,

Please enable the support access tunnel on your appliance, and PM me with your ID for further investigation.

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 FloSupport over 6 years ago in reply to Tam Ben-Jusu

Hi Mathew,

Please enable the support access tunnel on your appliance, and PM me with your ID for further investigation.

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data