Aerohive / LGFL Firewall / Lan3

[rsaddul1]

Hello Bossman,

 

I was wondering if you could shed any light on an issue we currently have at our school.

 

We are an option 1 LGFL school, therefore our firewall is looked after by LGFL. We have an external vendor called Lan3 which currently support our Aerohive

(WiFi System).

 

We don't control our firewall as it is managed by LGFL. Unfortunately they don't support and won't configure BootP or DHCP-Relay.

 

This has now put us in a predicament since we have all traffic routed through the firewall. Bare in mind we are using VLANS for the WiFi and we don't want to result in having everything on a default vlan.

 

How did you manage to get this working?

 

Regards

Rhys

Edited April 19, 2017 by rsaddul1

[DavidYoung]

Hi Rhys,

 

We are on LGfL and have VLANs at one of our sites. We have a layer-3 switch which handles all of our internal routing before forwarding external traffic onto the LGfL firewall. To do this we used a small subnet (/29 I think) which has the LGfL router internal IP and an interface from the layer-3 switch. You can then set up the DHCP relay on the switch. Atomwide will make the changes at their end but you need to plan out your VLANs and know what you're doing beforehand.

 

If you can't do that then the other option would be to run a DHCP server directly on the wireless VLAN but that could quickly get messy if you start to scale and also means you need to expose a server to the wireless VLAN.

 

Alternatively look to see if Aerohive has a built in DHCP server or relay. We use Ruckus and it does have that option.