Smoothwall DHCP server issuing 192 scope addressess to wrong VLAN

[alfatec]

Any help would be appreciated on my issue. We have a BYOD setup for Sixth Form students. On our Smoothwall UTM 1000 we have setup a second network interface and assigned a 192.168 address to it.

We have also setup a DHCP server to issue addressess in the 192.168 range through interface 1. We then have a transparant proxy policy setup on the smoothwall to do SSL login for the students and

on our Meru controller we have a Sixth Form wireless network setup which is VLAN'ed seperatly to our main school network. The problem we are experiencing at the moment is after a Smoothwall shutdown

we have noticed that the Smoothwall DHCP server is issuing 192.168 addressess to the main school network which obviously it shouldn't as the main school network is on a seperate VLAN.

[PeterH]

We had something similar to that happen once. Have you checked in Services | DHCP | Global | Interfaces. We found that the main school LAN had got ticked in there somehow. Unticked it and it's been OK since even after many shutdowns/restarts.

[alfatec]

Many thanks for that. Have now setup a VLAN interface which has resolved that problem. Only problem we have not is that the SSL login page does not show therefore cannot connect to the internet!!!!

[Gaz]

Do you have an authentication method for the vlan interface for an SSL Login page?

Web proxy » Authentication » Manage policies

So any traffic arriving at that interface should have that policy applied.

[alfatec]

Yes we have that applied but the SSL login page does not appear. I can ping the ip address of the interface as well.

[Gaz]

So the clients on the DHCP server are pointing to that interface?

 

Are you trying to setup the BYOD feature?

[alfatec]

Yes the clients pickup the 192.168 address from the DHCP server which is VLAN'd seperatly from the rest of the school. We then use transparent proxying so that they use their active directory user names and passwords.

All was working well until the Smoothwall was restarted last week. I can ping the network interface from a client which proves that the DHCP is working but I cannot do a NSLookup for any internet pages which indicates

it might be a DNS issue.

[PeterH]

We used to use the SSL login page but don't any more. But I seem to recall that to get the SSL login page working, we had to go into System | Administration | External Access and add :

 

Interface : (Your wireless network)

Source : ALL

Service : Other web acccess on HTTP (80)

 

Interface : (Your wireless network)

Source : ALL

Service : Other web acccess on HTTPS (442)

[alfatec]

Many thanks for all the replies. Turned out to be a defective networking config file on the Smoothwall UTM 1000 device. All sorted.

Out of interest PeterH what method do you use now?