Meraki/smoothwall BYOD

[itgeek]

Hi,

 

We have a meraki wireless network setup and I am testing a BYOD SSID. The problem I am facing is that I have configured smoothwall to handle the radius/aut however when the user connects its not getting forwarded to our smoothwall IP to filter the traffic and can track a user. Has anyone setup meraki and smothwall?

 

Thanks

[kennysarmy]

Hi,

 

We have Meraki WiFi / Radius Auth. and Smoothwall on site.

 

I'm about to leave for the day but happy to share any screenshots of our setup if it will help you out.

 

Regards

Jeff

[2097]

I am also trying to use Meraki and Smoothwall.

 

Radius Auth is the easy part

 

What im trying to sort out is howto forward the traffic to smoothwall for the transparent proxy.

 

Is this possible if you dont want all LAn traffic to be used via transparent ? we use our own Meraki MX firewall.

[2097]

I am also trying to use Meraki and Smoothwall.

 

Radius Auth is the easy part

 

What im trying to sort out is howto forward the traffic to smoothwall for the transparent proxy.

 

Is this possible if you dont want all LAn traffic to be used via transparent ? we use our own Meraki MX firewall.

 

So seems I have figured this out .

 

Currently we apply proxy settings via GPO on our wired connections , and i prefer doing it this way . Most people would say set the default route with 0.0.0.0 then next hop to the smoothwall. But this means all internet traffic for your whole network will be going via the smoothwall. I would rather it didnt ! ( especially since we use our own firewall ).

 

Currently our next hop is the firewalll ( Meraki MX ).

 

So on the Meraki MX you have "Static Routes" that routes back to the network stack for each vlan.

 

You also have "Source-based" routes that allow you to push only specific vlans to different next hop ips . Once this is done you are good to go ! . You can verify its working via a Tracert on a connected windows desktop.

 

Unsure what firewall you are using . But can recommend the Meraki MX, especially if you have dual internet connections.