Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 28 subscribers
  • Views 509 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG and APX120 - Guest WiFi

hoosty

Hi,

I have a XG and an APX120 here at home and I would like to configure a Guest WiFi.

I did it like here: https://www.youtube.com/watch?v=r7MVNkbNbzo

The SSID gets broadcasted, I can connect. But no IP is given out from DHCP.

Do you have a hint or a better Tutorial?

Thanks, Chris



This thread was automatically locked due to age.
  • 0

    Hi :Thank you for reaching out to Sophos community team.

    Can you please check and confirm is your issue related to below KBA? If yes then you may try suggested command and confirm the status. 

    https://support.sophos.com/support/s/article/KB-000036032?language=en_US

    If still problem exits then tcpdump on DHCP ports,  PCAP on DHCP ports, drop packet on DHCP ports will help to conclude more and you may check system or end device MAC in PCAP to see DORA transactions. 

    Sophos XG Firewall: How to capture packets and download the Packet Capture

    support.sophos.com/.../KB-000037007

  • 0 in reply to Vishal_R

    Hi,

    feels like DHCP issues are getting more, though quite basic, are'nt they?

     what does this mean on the KB you mentioned:

    When any static IP to MAC mapping is configured on a DHCP server on the XG Firewall (Network > DHCP), the configuration scope is at the network level only. This prevents the client from getting the IP address from another DHCP server that is configured on the XG Firewall.

    Does this mean, the particular static MAC entry for this client only? So the client with the static entry will not get addresses from other dynamic only ranges?

    Or does creating the first random static DHCP host break something internally?

  • 0 in reply to LHerzog

    Hi  It would be for specific machines or devices for which there is static MAC entry exist on existing DHCP and in such cases if one add another DHCP on another interface over XG then those machines or devices (for which static entry present on existing DHCP) will not get address from another DHCP server of XG when they are generating request behind that interface network as scope has been set to network level with default settings and to get IP from another DHCP server one need to set scope to global as per KBA command.