This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Guest Wireless Network in a Separate Zone

Louis Zwahlen over 5 years ago

Hello,

I try to create a Wi-Fi for our enterprise's clients in a separate zone of our network.

There is Wi-Fi Configuration :

We created an interface for the guest Wi-Fi :

We also created a DHCP server :

And there is the firewall policy :

I can connect my phone and my laptop to the Wi-Fi, i received an IP address, i can ping firewall interface but can't access to the internet..

Does anybody have an idea ?

Thanks,

Louis Zwahlen

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 5 years ago

Hi Louis,

do you have a Nat rule for this firewall rule?
ian
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 5 years ago

Hi Louis,

do you have a Nat rule for this firewall rule?
ian
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Louis Zwahlen over 5 years ago in reply to rfcat_vk

Hi,

No, i dont have any NAT rule for this firewall rule.

Do i need to set one ? If yes, how ?

Thanks,

Louis
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to Louis Zwahlen

Hi Louis,

depends on version of XG? V17 it should be part of your firewall rule.

If v18 will depend on whether you are using linked rules. A generic Masq Nat at the bottom of your Nat list should be sufficient.

ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Louis Zwahlen over 5 years ago in reply to rfcat_vk

I'm on a XG 210 V17,

There is firewall rule configuration :
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to Louis Zwahlen

Hi Louis,

the only thing I can think of at this stage is the specific gateway Nat policy.

please review the log viewer reports to see which if any rule is causing the issue.

ian
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 5 years ago in reply to Louis Zwahlen

Hi Louis Zwahlen

Thank you for providing a screenshot.

It looks like web filtering license has expired. Please change the web policy to "None" and save the rule.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Louis Zwahlen over 5 years ago in reply to FormerMember

Thank you for your answer.

Unfortunately, that didn't solve my problem.

Do you have another idea?

Thanks,

Louis
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to Louis Zwahlen

Hi,

what does the log viewer show when you filter by rule number?
ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Louis Zwahlen over 5 years ago in reply to rfcat_vk

Hi,

There is a screenshot of Log Viewer filtered by firewall rule number :

Thank you for your help,

Louis
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to Louis Zwahlen

Hi Louis,

they can be ignored they are the end of a connection that has been closed.

Try searching through a number of logviewer files using your IP address as a filter.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Louis Zwahlen over 5 years ago in reply to rfcat_vk

Hi,

Fine, so i filter with my phone IP Address :

Louis
Cancel
Vote Up 0 Vote Down

Cancel