Badaz52 Posted August 2, 2014 Author Posted August 2, 2014 Yeah makes sense, we use 10.0 for all wifi devices and 172 for domain static devices, but I'm sure L3 only makes this possible. You should be ok to vlan using same range on 1.0 Right ive managed to get the interfaces talking somehow! I have an interesting issue now though in that if i create the vlan interfaces on the port that isnt connected i can see these in dhcp server and dns proxy and can select them. If i create the vlan interfaces on the port that is connected they dont appear...
Badaz52 Posted August 11, 2014 Author Posted August 11, 2014 Right everything is working now turns out i found a legacy bug with smoothwall and vlans which they have now sorted for me. I just now have one remaining issue. I have configured dhcp on all of my vlan interfaces with a separate range for each for example: 172.16.0.2 to 172.16.0.254 for staff 172.16.1.2 to 172.16.4.254 for students 172.16.5.2 to 172.16.5.254 for guest 172.16.6.2 to 172.16.7.254 for 6th form I have untagged a port on the switch for my laptop on the staff vlan and i can confirm i have received a lease from smoothwall however it has given me 172.16.6.2 which is 6th form only im not connecting on this vlan whats gone wrong?
timbo343 Posted August 11, 2014 Posted August 11, 2014 I would check the switch config and look for which vlan the port is configured for. Sounds like a config error more than anything else to me
Badaz52 Posted August 11, 2014 Author Posted August 11, 2014 Ive got the card that the vlans are on plugged into port 12 on the switch which is: Untagged vlan 1 Tagged 100-103 Laptop in port 4 untagged on vlan 100 (staff) smoothwall is set as vlan 100 for staff staff dhcp range is 172.16.0.2-172.16.0.254 but i dont get an ip from this range hmm
timbo343 Posted August 11, 2014 Posted August 11, 2014 Are you able to post the switch config (thats if it isnt too big) and let us know what each VLAN ID is for each group... ie VLAN 100 = Staff, VLAN 101 = Students etc.
ass17 Posted August 12, 2014 Posted August 12, 2014 Make sure that your VLAN IDS on the switch match those you have setup as your smoothwall interfaces.
Badaz52 Posted September 8, 2014 Author Posted September 8, 2014 (edited) Finally made a lot of progress with this, I have now managed to get smoothwall dishing out IP addresses exactly as I want and correctly depending on which SSID I connect to. I have followed the guide that was posted on here to configure the transparent proxies to re-direct to SSL page with session cookie and that is where I come unstuck. If I connect a device it takes me to the ruckus page to authenticate and authenticates perfectly, it then tries to load the smoothwall authentication page on port 442 which shows up in the web browser address bar correctly but then it says page cannot be displayed. What could I have missed? Edited September 8, 2014 by Badaz52
altecsole Posted September 8, 2014 Posted September 8, 2014 I'm assuming you have an allow entry for Smoothwall. With our setup, I found that I had to change my ZoneDirector ACL to 'Allow all by default', set the entries I wanted to allow as No. 1 - 7 and then set a final entry at No. 8 to Deny our entire subnet. Previously I had it set to 'Deny all by default' with entries to allow, but couldn't get the SSL login to work. Changing to the above sorted that. Hope that helps for you.
Badaz52 Posted September 8, 2014 Author Posted September 8, 2014 I don't think I have that bit sorted, are you able to guide me through how to do this? I don't know much about ruckus still learning! lol
altecsole Posted September 8, 2014 Posted September 8, 2014 If you haven't got any access control setup on your Zonedirector, I wouldn't worry about it. It was the ACL for our WLANs that stopped the SSL login page working for us. If you haven't configured ACLs, then that won't be the problem.
Badaz52 Posted September 8, 2014 Author Posted September 8, 2014 If you haven't got any access control setup on your Zonedirector, I wouldn't worry about it. It was the ACL for our WLANs that stopped the SSL login page working for us. If you haven't configured ACLs, then that won't be the problem. I dont have any Acls configured but do have some restricted subnets defined in guest access but i dont think its the ZD. I authenticate to ZD no problem it then tries to find smoothwall on port 442 for login but cant. I cant ping it nor does it connect if i change it from hostname to ip. What else could be stopping it?
ass17 Posted September 8, 2014 Posted September 8, 2014 Do you mean 443 not 442? 443 is default https port
Badaz52 Posted September 8, 2014 Author Posted September 8, 2014 Do you mean 443 not 442? 443 is default https port Smoothwall login page loads from 442 doesnt it? I have followed the guide which says provide external access for 81 and 442 is this not right?
ass17 Posted September 8, 2014 Posted September 8, 2014 Ah yes smoothy login page is 442, didnt read it carefully.
ass17 Posted September 8, 2014 Posted September 8, 2014 (edited) Try this Login to your ZD. Go to configure guest access then under restricted subnets put in the subnet The destination address to your range to wish to access. For example our rule is: Description access to pupils gateway address is 10.82.0.1/32 to any application to any protocol to any destination. Save Make sure it sits at the top above the deny rules. 10.82.0.1 is the vlan IP address of our pupil wifi interface setup in smoothy Edited September 8, 2014 by ass17
ass17 Posted September 8, 2014 Posted September 8, 2014 (edited) Also on smoothy you need the following: System >> Administration >> External Access Interface | Source | Service | Enabled Port 1-2_PupilWIFI | 10.82.0.0/21 | other web acess on HTTP (80) | Enabled Port 1-2_PupilWIFI | 10.82.0.0/21 | other web access on HTTPS (442) | Enabled As before change 10.82.0.0/21 for your ip network address Edited September 8, 2014 by ass17
Badaz52 Posted September 9, 2014 Author Posted September 9, 2014 Still no luck, really frustrating as this is the last piece of the puzzle lol.
altecsole Posted September 9, 2014 Posted September 9, 2014 We use port 80 for our SSL Cookie Session login page for Smoothwall? Admin login is on port 441.
Badaz52 Posted September 9, 2014 Author Posted September 9, 2014 We use port 80 for our SSL Cookie Session login page for Smoothwall? Admin login is on port 441. Finally got it working turns out i missed part of the instruction where on external access you add the network address with the subnet mask as a / i sort of didnt do that bit so only had the network address in with no subnet mask doh! Thank you to everyone who has helped and finally it is working :-)
ass17 Posted September 9, 2014 Posted September 9, 2014 Your very welcome, future ruckus users take note, please use the guide that a user had created and also refer to this post. You will get there in the end!! Good luck and good night!!
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now