Can't talk to Ruckus ZD from iPad - help!!

[ass17]

Hi, I'm looking for inspiration for an issue that has got me frustrated!

 

We have a wifi network that supposedly has full access on the whole network, wired and wireless.

 

Smoothwall has a rule setup for zone bridging to all all in 10.85 ip's access to all on 172.16.0.0/24. So would cover all wired devices on our network.

 

My question is do I still need ACLs similar to on our core switches or does smoothy and Zone Director take care of access?

 

I can access the servers ok from iPads on 172.18 / 172.19 & 172.20 ip's. But cannot access ip's on 172.17

 

Any help would be greatly appreciated. I bet I've missed something easy but it's driving me nuts!

[ass17]

Help anyone? Bump....

[timbo343]

Im struggling to understand what you have wrote... am i right in thinking your wired domain is 10.85.x.x?

 

Are ranges 172.18.x.x/24, 172.19.x.x/24, 172.20.x.x/24 individual?? Or are 172.17, 172.18, 172.19, 172.20 across one big subnet??

 

We have 172.16.24.x - 172.16.31.x on a /21 subnet for our domain and then:

192.168.12.1 – 192.168.15.254 | 255.255.252.0

for staff

192.168.16.1 – 192.168.20.254 | 255.255.248.0

for post16

192.168.24.1 – 192.168.24.254 | 255.255.255.0 for guest.

 

All these are controlled by the smoothwall in zone bridging along with entries to servers configured in DNS in the smoothie. No ACLs on our Ruckus box.

[ass17]

Our wifi for ICT is on 10.85 and all servers are on a big subnet from 172.17-172.20

[ass17]

We have setup a zone bridge from ICT wifi to all internal 172.16 to 172.252, which covers all clients on the network across multiple vlans. The zone director shouldn't need a DNS when I'm trying to ping the ZD ip. My question is do you need any ACLs on the core switches or does the ZD and smoothy do all what is required?