Head scratch with BYOD setup

[plexer]

I'm attempting to setup a BYOD wireless network and have the following.

 

Smoothwall SWG-1200 this will be configured to provide a transparent proxy, connected to core switch port configured for VLAN 3 BYOD_Guest

 

Core Switch HP 4108GL with VLAN 3 setup called BYOD_Guest

 

Hyper-V Server with Windows 7 guest running tftpd32 to provide dhcp, 2nd nic of Hyper-V allocated to this Win7 guest and the physical nic is plugged into a port on the core switch tagged with VLAN 3

 

HP 420 Wireless Access Point with Guest SSID setup and tagged with VLAN 3, this physical port of this WAP however is just plugged into a normal switch port with no vlan association as it also needs to serve wireless access on the corporate wifi network.

 

I noticed however that the tftpd32 on the Win7 guest had given out DHCP to various clients, I'm wondering if there is some sort of bridge between the 1st physical nic which is server vm's on the corporate lan and the 2nd physical nic which is for the BYOD network?

 

Thoughts?

 

Ben

[plexer]

160 views and no comments at all?

 

Ben

[Davit2005]

160 views and no comments at all?

 

Ben

 

Subscribed to post as in similar situation so sorry can't provide any help or advice from experience.

 

Were jus about to setup different vLans for guest network. We have an old HP gl . Jus upgraded software so IP Routing and trunking at same time has gone. Will have to use a sonicwall to route traffic between guest and production vLans. Next year will push for a newer Procurve I think. Hopefully as using different interface for seperate vlan will be able to use sonicwall for Dhcp if push comes to shove.

[robk]

HP 420 Wireless Access Point with Guest SSID setup and tagged with VLAN 3, this physical port of this WAP however is just plugged into a normal switch port with no vlan association as it also needs to serve wireless access on the corporate wifi network.

 

I noticed however that the tftpd32 on the Win7 guest had given out DHCP to various clients, I'm wondering if there is some sort of bridge between the 1st physical nic which is server vm's on the corporate lan and the 2nd physical nic which is for the BYOD network?

 

Thoughts?

 

Ben

 

Just checking, the AP port is tagged with Vlan 3 at the switch?

 

Seems a very strange issue.

[SYNACK]

Sounds like there is a leak but it could just as easily be switch or devie config. It the hp AP setup to only hit VLAN3 and is the switch setup to take tagged frames from it.

 

Is there any DHCP helper/broadcast fowarding setup on the core. If you pull the routing config from VLAN3 to isolate it can you till ping it from the outside (to see if it is the switch or the other hardware)

[plexer]

upgraded software so IP Routing and trunking at same time has gone.

 

Port trunking gone?

 

Ben

[plexer]

Just checking, the AP port is tagged with Vlan 3 at the switch?

 

Seems a very strange issue.

 

The port that the AP is plugged into isn't tagged with VLAN 3 as the other SSID needs to go the radius server on the main lan, or does it still need to be tagged anyway?

 

Ben

[Ric_]

Your server should be plugged into a port untagged in VLAN3 and the AP should be tagged in all the VLANs that it passes traffic for (imagine it is like a switch that you have a trunk to).

[Davit2005]

Sorry for delay, have been saturated with other projects.

 

Yes, I believe that since a certain firmware update, Trunking and IP routing at same time has support has dissapeared, not tried in practice (a test for summer me thinks).