Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Guest Wireless Network - Allow Internet Access

 I have setup a VLAN 200 for Guest Wireless access on my Aruba IAP access points. I have everything I believe configured correctly on the switches where the AP's are attached and have their ports tagged in VLAN 200. 

I have the DHCP server setup on the XG 230 and i am able to pull an IP address from it if I connect a computer to it. I just can't get out to the internet. 

I have setup a new interface on the XG for internet access (Port 4) and then setup the VLAN on that same port (Port 4 200). 

I just for the life of me can't get that traffic coming into that port to go out to the internet. What am I missing?



This thread was automatically locked due to age.
Parents Reply
  • The problem on the Chris configuration was the ip address.

    Both Port 4 and Port4.200 (VLAN) were using 2 different IP but in the same subnet.

    The trick was to change the Port4 IP to another one not used inside the XG and create a Policy Rule where Wi-FI custom zone to WAN with HTTP/S and DNS were allowed.

    All good!

Children
  • Seriously thank you for your help! You are a life saver!

  • Hate to bring up an old thread here but for some reason on our phones I can't connect to our Mitel MiCollab Client app to change our status when we are the Guest W-Fi. It works great if we turn off our Wi-Fi and use Cellular but I for the life of me can't figure why when people are on the Guest Wi-Fi we can't connect to the Mitel MiCollab client. 

    I believe it may have something to do with NAT & Routing and Masquerading. If I turn off Masquerading I am able to connect to the MiCollab client but then the internet shuts down for the Guest W-Fi network. I just don't get it....

    Any help would be greatly appreciated! Thanks.