topic guest setup in Wireless

guest setup

hugh.lancaster — Sun, 04 Jul 2021 04:18:20 GMT

I read the following link http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008070ba8f.shtml#C4 and I need some help. ISP owns the router but I own the a firewall (watchguard 1250e) and is set to drop-in mode. Currently I have one VLAN configured. My network consists of Cisco 3750 switches and Cisco WLAN 1252's. Wireless is working with no problems. I want to configure wireless guest account for my IPAD's. I have public IP address assigned to my trusted network interface and I created a secondary network for my internal users. 10.100.0.1\21. All my switches, WLAN's, computers, etc or configured with this secondary IP address. I have an internal DHCP server for distributing IP address's to my computers.

Can I configure the firewall eg. add another secondary IP address range of 10.100.8.0 and configure the VLAN on the switches to for this range?

guest setup

Scott Fella — Wed, 28 Dec 2011 17:59:43 GMT

Hugh,

Never tried using a secondary address for the wireless, but I don't see why it wouldn't work. IS this an autonomous setup or do you have a WLC? From the link you posted, it looks like it s a WLC, but just making sure.

guest setup

hugh.lancaster — Wed, 28 Dec 2011 18:27:54 GMT

I have a WLC

guest setup

Scott Fella — Wed, 28 Dec 2011 18:32:00 GMT

Well if you can get the secondary address to route to your FW or have your FW do the routing, then you should be able to get that to work. The only think I can see is when you create teh dynamic interface on the WLC and you have to specify the vlan id. That might be where this might not work. Its easier if you don't have a secondary address and just create a whole new subnet/vlan and either have the L3 switch do the routing.

guest setup

hugh.lancaster — Wed, 28 Dec 2011 18:45:48 GMT

Here is watchguards response.

option 1 - have the 2nd VLAN connect to an unused firewall interface as an untagged port, using a

different subnet than is on trusted

option 2 - have the 2nd VLAN also be enabled on the switch port which connects to your firewall

guest setup

Scott Fella — Wed, 28 Dec 2011 19:17:43 GMT

Well the thing with secondary address is that you use the same vlan id. I don't think the FW will accept that.

guest setup

hugh.lancaster — Wed, 28 Dec 2011 19:41:30 GMT

You are most likely right..... After researching my switches (3750's). If I engage EMI which acts as routing between the VLANs, shouldn't that work.

Re: guest setup

Scott Fella — Wed, 28 Dec 2011 19:57:07 GMT

That will work.

Thanks,

Scott Fella

Sent from my iPhone