alfatec Posted November 2, 2015 Posted November 2, 2015 Any help would be appreciated on my issue. We have a BYOD setup for Sixth Form students. On our Smoothwall UTM 1000 we have setup a second network interface and assigned a 192.168 address to it. We have also setup a DHCP server to issue addressess in the 192.168 range through interface 1. We then have a transparant proxy policy setup on the smoothwall to do SSL login for the students and on our Meru controller we have a Sixth Form wireless network setup which is VLAN'ed seperatly to our main school network. The problem we are experiencing at the moment is after a Smoothwall shutdown we have noticed that the Smoothwall DHCP server is issuing 192.168 addressess to the main school network which obviously it shouldn't as the main school network is on a seperate VLAN.
PeterH Posted November 2, 2015 Posted November 2, 2015 We had something similar to that happen once. Have you checked in Services | DHCP | Global | Interfaces. We found that the main school LAN had got ticked in there somehow. Unticked it and it's been OK since even after many shutdowns/restarts.
alfatec Posted November 2, 2015 Author Posted November 2, 2015 Many thanks for that. Have now setup a VLAN interface which has resolved that problem. Only problem we have not is that the SSL login page does not show therefore cannot connect to the internet!!!!
Gaz Posted November 2, 2015 Posted November 2, 2015 Do you have an authentication method for the vlan interface for an SSL Login page? Web proxy » Authentication » Manage policies So any traffic arriving at that interface should have that policy applied.
alfatec Posted November 2, 2015 Author Posted November 2, 2015 Yes we have that applied but the SSL login page does not appear. I can ping the ip address of the interface as well.
Gaz Posted November 2, 2015 Posted November 2, 2015 So the clients on the DHCP server are pointing to that interface? Are you trying to setup the BYOD feature?
alfatec Posted November 2, 2015 Author Posted November 2, 2015 Yes the clients pickup the 192.168 address from the DHCP server which is VLAN'd seperatly from the rest of the school. We then use transparent proxying so that they use their active directory user names and passwords. All was working well until the Smoothwall was restarted last week. I can ping the network interface from a client which proves that the DHCP is working but I cannot do a NSLookup for any internet pages which indicates it might be a DNS issue.
PeterH Posted November 3, 2015 Posted November 3, 2015 We used to use the SSL login page but don't any more. But I seem to recall that to get the SSL login page working, we had to go into System | Administration | External Access and add : Interface : (Your wireless network) Source : ALL Service : Other web acccess on HTTP (80) Interface : (Your wireless network) Source : ALL Service : Other web acccess on HTTPS (442)
alfatec Posted November 3, 2015 Author Posted November 3, 2015 Many thanks for all the replies. Turned out to be a defective networking config file on the Smoothwall UTM 1000 device. All sorted. Out of interest PeterH what method do you use now?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now