Problems with VLAN guest WiFi (Unifi)

Hi,

please post a copy of your firewall rule.

Ian

Here you go, LAN AP's to VLAN

And here's the VLAN to WAN rule

And finally the VLAN interface

Hi,

you have nothing setup to allow traffic out of the XG.

I don't understand your LAN to VLAN rule, what are you trying to achieve?

Ian

Nothing allowing out?  The firewall VLAN interface, port4.200 is in the VLAN I setup.  Which is also in the rules I showed you.  Unless I'm misunderstanding something.

There shouldn't be anything else to allow, since the Wifi device and firewall would be in the same zone because of the VLAN interface.  The frames are being tagged as they exit the switch ports and reach the firewall.

The LAN to VLAN rule allows the AP's to talk to the firewall.

Hi,

you will need to provide a masq as part of your allow out rule.

ian

You seem to be doing this the hard way. Why do you want the wifi on a VLAN when you are connecting the VLAN to the LAN with a general firewall rule, what about local wifi users?

Okay I see where I missed that now.  I'll be sure to add the masq to the rule.  The purpose of the VLAN and to separate the guest WiFi traffic from the normal corporate traffic.

There's some sensitive traffic that the guests shouldn't have access to.  Thus why I was allowing only the AP's to communicate with VLAN zone.  Thanks for your help so far.

Okay I see where I missed that now.  I'll be sure to add the masq to the rule.  The purpose of the VLAN and to separate the guest WiFi traffic from the normal corporate traffic.

There's some sensitive traffic that the guests shouldn't have access to.  Thus why I was allowing only the AP's to communicate with VLAN zone.  Thanks for your help so far.