Smoothwall getcert redirection issue

[Sheridan]

We have an S9 with internal networks all working, but also with a Guest wifi directed to it - on this the guest wifi gets DHCP addresses etc from the built in DHCP server

 

This all works fine, clients connect and get a DHCP address - but one odd thing is that when we use the splash page redirect to prompt them to install the certificate it just times out ( took too long to respond)

 

This is using the http:///getcert of the address of the Guest port on the S9 - if I use the internal address (i.e what our network uses) then the certificate page loads fine

 

The guest still get internet access OK, but do get cert errors when trying to access a https inspected page - so I'm not sure if I've missed something on the guest access side?

[tom_newton]

Not something I have seen before. Could be a firewall rule locally on the Smoothwall blocking that IP from being accessed?

[kennysarmy]

Anything to do with:

 

https://:441/ui/admin/hostname

[Sheridan]

Can't see any firewall rules that would block, and the logs show nothing being dropped. Its all working as expected, apart from they clients can't access the smoothwall on the Guest IP (which is the same address that is being used for DHCP/router etc)

[tom_newton]

Support ticket time then I think

[simpsonj]

Can't see any firewall rules that would block, and the logs show nothing being dropped. Its all working as expected, apart from they clients can't access the smoothwall on the Guest IP (which is the same address that is being used for DHCP/router etc)

 

No settings on the WiFi that block access to local networks? On my Meraki I can set whether devices on a specific SSID can see the local network, or just specific IP addresses.

[Sheridan]

No settings on the WiFi that block access to local networks? On my Meraki I can set whether devices on a specific SSID can see the local network, or just specific IP addresses.

 

Ah that looks like it, I didn't set this wifi up (its been in a few years) and there appears to be a traffic shaping rule that blocks access to the LAN! I'll add a rule to allow the Smoothwall ip and test that!