SmoothWall Zone Bridging & VLANs

[smarties11]

Hi All,

 

I was wondering for those of you that have this set up, whether you could have a look at my setup below and find any obvious issues?

 

We have our internal LAN for domain devices on subnet 10.24.208.0/20, gateway 10.24.208.1 (LSN router), VLAN 1

 

And then a BYOD VLAN on subnet 172.16.0.0/20, gateway 172.16.0.1 (smoothwall), VLAN 2

 

Internal LAN is smoothwall port 1

BYOD VLAN is smoothwall port 2

 

I have setup my core switch (HP 5820) as follows

 

#

interface GigabitEthernet1/0/26

port link-mode bridge

description Smoothwall Port 1 (Internal)

stp edged-port enable

#

interface GigabitEthernet1/0/27

port link-mode bridge

description Smoothwall Port 2 (VLAN 2)

port access vlan 2

stp edged-port enable

 

I have setup the following Zone Bridging rule in SmoothWall

 

Protocol: ALL

Source interface: port 2

Source IP: 172.16.0.0/20

Destination interface: port 1

Destination IP: 10.24.208.0/20

Destination port: ALL

Bi-directional: yes

Enabled: yes

 

Obviously I will reduce the IP ranges etc on this once it is working.

 

I have RUCKUS set up to present a captive portal page, authenticated against AD and then with RADIUS accounting going to SmoothWall. This works a treat and my users can get internet access no problem.

 

However, they can't access our internal webservers on 10.24.208.0/20 from 172.16.0.0/20, despite me having set up the above zone bridging rule.

 

I have logged a case with SmoothWall but I wondered if anyone here had any advice to offer. Do I need to do anything else on my core switch? Surely I don't need VLAN/subnet routing in place on there when the SmoothWall can do this for me?

 

Thanks,

Smarties11

[smarties11]

Hi,

 

Just an update to say that SmoothWall found the solution. It's because the LSN router is the default gateway on the 10.24.208.0/20 subnet rather than the SmoothWall so there is no route back to the 172.16.0.0/20 subnet. For now, I've changed the default gateway just on the web servers we need access to and now the Zone Bridging works. Longer term I'll make SmoothWall the default gateway for all devices on the subnet (with the SmoothWall interface then having a default gateway of the LSN router).

 

Just thought I'd update in case others have similar issues.

 

Smarties