Lightspeed and Guest Wifi VLAN

[ITGURU]

I've taken over a network which is using Lightspeed for their filtering. I have set up a Guest WIFI VLAN so the client gets an IP from the DHCP server and can ping through to the core switch which has an interface IP for both VLAN 1 and 40 (guest VLAN).

 

How do i get the client to access the internet through the lightspeed and get the captive portal login (same as a pc on VLAN if doesnt have the agent) so users can login with AD credentials.

 

How do i get the traffic from the guest VLAN 172.x.x.x range to get through the lightsppeed on the 10.x.x.x range. Lightspeed box has the 172 range added as a network, but does the port on the core switch that the lightspeed is connected to need to have tagged ports also and what would the GW IP be for the client?

 

if any clarification on what i'm trying to achieve is required, please let me know.

 

Thanks.

[AlanD]

If these users are BYOD - I would use radius (linked through to AD) rather than a captive portal.

 

So 10.x is your internal network? I don't think I'd be adding a static rule for that - otherwise you would be allowing access for all traffic between Guest and internal network. Think I'd be adding a real or virtual IP network interface to lightspeed and connecting it to guest network. I'm guessiong (because I don't have one) that light speed will cope with multiple "internal" networks.