This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Guest Wireless Network in a Separate Zone

Louis Zwahlen over 5 years ago

Hello,

I try to create a Wi-Fi for our enterprise's clients in a separate zone of our network.

There is Wi-Fi Configuration :

We created an interface for the guest Wi-Fi :

We also created a DHCP server :

And there is the firewall policy :

I can connect my phone and my laptop to the Wi-Fi, i received an IP address, i can ping firewall interface but can't access to the internet..

Does anybody have an idea ?

Thanks,

Louis Zwahlen

This thread was automatically locked due to age.

Parents

0 rfcat_vk over 5 years ago

Hi Louis,

do you have a Nat rule for this firewall rule?
ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Louis Zwahlen over 5 years ago in reply to rfcat_vk

Hi,

No, i dont have any NAT rule for this firewall rule.

Do i need to set one ? If yes, how ?

Thanks,

Louis
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to Louis Zwahlen

Hi,

what does the log viewer show when you filter by rule number?
ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Louis Zwahlen over 5 years ago in reply to rfcat_vk

Hi,

There is a screenshot of Log Viewer filtered by firewall rule number :

Thank you for your help,

Louis
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to Louis Zwahlen

Hi Louis,

they can be ignored they are the end of a connection that has been closed.

Try searching through a number of logviewer files using your IP address as a filter.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Louis Zwahlen over 5 years ago in reply to rfcat_vk

Hi,

Fine, so i filter with my phone IP Address :

Louis
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to Louis Zwahlen

Again, they are dead connections and not what we are looking for. What shows in web report?

Try changing your firewall rule from guest wifi to wifi.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Louis Zwahlen over 5 years ago in reply to rfcat_vk

Hi,

Where can i find this web report ?

I tried to change my firewall rule from guest wi-fi to wi-fi, it doesn't work.

Thanks,

Louis
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to Louis Zwahlen

Hi,

logviewer -> web filter from drop down memo.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Louis Zwahlen over 5 years ago in reply to rfcat_vk

Hi,

There are no records in the web filter.
Is that normal?

Thanks,
Louis
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to Louis Zwahlen

Hi Louis,

there is something wrong with your configuration of the wifi. Please post a screen shot of the network interfaces and the zone configuration.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Louis Zwahlen over 5 years ago in reply to rfcat_vk

Hi,

There is my Wi-Fi configuration :

DHCP

Firewall

Zones

Wi-Fi

Interface
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Louis Zwahlen over 5 years ago in reply to rfcat_vk

Hi,

There is my Wi-Fi configuration :

DHCP

Firewall

Zones

Wi-Fi

Interface
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 rfcat_vk over 5 years ago in reply to Louis Zwahlen

Hi Louis,

there is something wrong, but I can't see it, maybe a bug when using wifi as a zone rather than LAN.

I know you can get an IP and ping re XG, can you connect to it?

The logviewer results indicate that the PC is not connecting to an active firewall rule.

Let us wait for a more experienced Sophos support forum member to have a look.

Ian
Cancel
Vote Up 0 Vote Down

Cancel