+ Post New Thread
Results 1 to 9 of 9
Wireless Networks Thread, Guest wireless - proxy settings in Technical; Hi All, I have just started installing UniFi APs and would like some advice I have set up an internal ...
  1. #1

    CESIL's Avatar
    Join Date
    Nov 2006
    Location
    Hampshire
    Posts
    1,403
    Thank Post
    109
    Thanked 267 Times in 198 Posts
    Rep Power
    168

    Guest wireless - proxy settings

    Hi All,

    I have just started installing UniFi APs and would like some advice

    I have set up an internal and guest SSID and the Android tablets we have here are working fine with the internal one as the management software allows me to configure the proxy settings for all devices.

    But guest devices are another matter...I have to manually enter the proxy settings to get internet access. So obviously I would like to have the proxy settings supplied automatically.

    My question is what is the best way to do this...we connect to t'internet through our LEA via their Squid server(s) and filtering is done by them.

    Would I be able to run a transparent proxy here that would forward guests to the LEA internet access and if so what would be the best way to do this?

    Ta muchly for any help

  2. #2
    soveryapt's Avatar
    Join Date
    Jan 2009
    Location
    Lancashire
    Posts
    2,401
    Thank Post
    648
    Thanked 277 Times in 244 Posts
    Rep Power
    78
    Assuming you're running your own DHCP server, you could put an auto configuration link in WPAD so that as long as the client has the auto detect settings turned on for their device, that should setup the proxy settings for them. It's what I do here and seems to work well for the few people who use it.

  3. Thanks to soveryapt from:

    CESIL (18th November 2013)

  4. #3
    IrritableTech's Avatar
    Join Date
    Nov 2007
    Location
    West Yorkshire
    Posts
    791
    Thank Post
    83
    Thanked 171 Times in 140 Posts
    Rep Power
    64
    As @soveryapt suggests a WPAD file via DHCP is the most seem less route (there are issues with devices seeing a transparent proxy as a man-in-the-middle attack). Unfortunately, WPAD support is limited.

    I wrote a couple of blog posts on my findings around this subject which may be of some help? Try this one for starters... http://irritabletech.co.uk/2012/06/b...ture/#more-549

    You need to offer the full suite of options to cover the most devices. We ended up with WPAD, hosted pac files and manual proxies. Ended up creating handouts for the different devices.

    We've ended up now removing the proxy altogether. Previously only the more IT savvy users were managing to get online, now it regularly hits the 100 mark.
    Last edited by IrritableTech; 18th November 2013 at 12:31 PM.

  5. #4

    twin--turbo's Avatar
    Join Date
    Jun 2012
    Location
    Carlisle
    Posts
    2,334
    Thank Post
    1
    Thanked 381 Times in 340 Posts
    Rep Power
    150
    Quick Q...

    Are you seperating off the guest clients from your main lan with a vlan?

    Rob

  6. #5
    IrritableTech's Avatar
    Join Date
    Nov 2007
    Location
    West Yorkshire
    Posts
    791
    Thank Post
    83
    Thanked 171 Times in 140 Posts
    Rep Power
    64
    Quote Originally Posted by twin--turbo View Post
    Quick Q...

    Are you seperating off the guest clients from your main lan with a vlan?

    Rob
    Me? Yes, and access lists.

  7. #6

    twin--turbo's Avatar
    Join Date
    Jun 2012
    Location
    Carlisle
    Posts
    2,334
    Thank Post
    1
    Thanked 381 Times in 340 Posts
    Rep Power
    150
    No The OP...

    Rob

  8. #7

    CESIL's Avatar
    Join Date
    Nov 2006
    Location
    Hampshire
    Posts
    1,403
    Thank Post
    109
    Thanked 267 Times in 198 Posts
    Rep Power
    168
    Quote Originally Posted by twin--turbo View Post
    Quick Q...

    Are you seperating off the guest clients from your main lan with a vlan?

    Rob
    Not yet, but I was going to do that once I got the proxy issues sorted. Would setting up the vlan first make the proxy thing easier?

  9. #8
    IrritableTech's Avatar
    Join Date
    Nov 2007
    Location
    West Yorkshire
    Posts
    791
    Thank Post
    83
    Thanked 171 Times in 140 Posts
    Rep Power
    64
    You can set up different WPAD files per vlan which can be handy, but the vlans don't make it any easier.

  10. #9

    twin--turbo's Avatar
    Join Date
    Jun 2012
    Location
    Carlisle
    Posts
    2,334
    Thank Post
    1
    Thanked 381 Times in 340 Posts
    Rep Power
    150
    Quote Originally Posted by IrritableTech View Post
    You can set up different WPAD files per vlan which can be handy, but the vlans don't make it any easier.
    But do you want guest on the same physical network as your students and servers?

    Rob

SHARE:
+ Post New Thread

Similar Threads

  1. Need help and advice on wireless guest access proxy settings
    By sammy42 in forum Learning Network Manager
    Replies: 4
    Last Post: 6th October 2011, 08:43 AM
  2. Proxy settings not there on second logon.
    By robinhood in forum Learning Network Manager
    Replies: 7
    Last Post: 6th October 2007, 11:14 AM
  3. Zimbra Web Proxy Setting
    By Geoff in forum *nix
    Replies: 5
    Last Post: 25th April 2007, 12:02 PM
  4. Proxy Settings Not Applied
    By dezt in forum Wireless Networks
    Replies: 16
    Last Post: 3rd October 2006, 08:26 PM
  5. Problem with Proxy settings in GPO
    By tosca925 in forum Windows
    Replies: 9
    Last Post: 18th January 2006, 12:54 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •