robk

Should that be most items.... Apple certainly know how to pile on the Apple Tax...

Does anyone know the "fix" for a vl300 running as a non admin user windows 7. Sitting in front of one right now, and can't find the solution...

Wildcard Certificate is probably the way... Thats what we used.

Now its working you might want to change the subnet mask in ruckus to just allow the smoothwall ip. Change the /22 to/32 and any other ip will be blocked, without stopping smoothwall auth.

Glad to hear its all working! And documented on here to boot.

Ok does nslookup work on the client? To me it sounds like dns is blocked. I added zone bridging rules, but I think in your case I would recommend dns proxy. For dns proxy you turn the service on and set dns in dhcp to the smoothie ip for the subnet.

Is dns working on the client? Trying to think what's missing. We don't seem that far off working!

Yes that's it. It in the guest access tab in ruckus.

It's your ruckus config.... In guest access on the zonedirector you need to put in exceptions for the smoothwall ips. I suspect you have client isolation on (which is a good idea) but by default the ruckus security blocks ips including the auth page.

It does depend what DNS servers the smoothwall box is using, DNS proxy might give out internal IPs which some people wouldn't want. However in @timbo343's case I suspect enabling that and changing DNS to the smoothwall IP in DHCP would fix any DNS issues without zone bridging rules.

What sort of Auth is Ruckus doing? Or do you mean the SSL auth page in smoothwall? Is transparent proxy enabled on the new ports with SSL auth with cookie selected as the auth method. In fact have you enabled guardian on the new interfaces, theres a set of tickboxes in web filter setup which turns on the service. I am wondering if we need zone bridging rules to enable DNS, but you should still see the auth page. Not got a smoothie interface in front of me to confirm where the boxes are... Will see what I can spot when I can log into ours.

Hoping to call in at some point. Have registered at least!

Right, I think I see whats not working. What I would do is for the staff vlan remove the ip address from the core switch, and put everything on the smoothie. You problably dont want to use the smoothie as DHCP though. By router do you mean default gateway? If so the default gateway needs to be on the same subnet as the vlan otherwise it can't route out. You could turn on DHCP relay in smoothwall, (which means the you can turn off the ip on the core switch) You would then enable the smoothwall DHCP service on the interface created shortly. So rather than having vlan 2 name "Staff-BYOD" ip address 192.168.12.1 255.255.252.0 ip helper-address 172.16.24.4 tagged A1,A3-A4,A9,A11,A14 exit on the core switch do a vlan 2 no ip address no dhcp helper-address exit The smoothwall box is already the default gateway for the network, so you dont need to fiddle with routing tables. In smoothwall networking add a virtual interface on Port 1 Tagged vlan 2 ip address 172.16.24.24 subnet 255.255.248.0 And everything should be up and running. (the core switch doesnt need to have a IP and route traffic, it can just pass the data up to smoothwall to do that.) Thats how ours is done, though I have smoothie doing DHCP, and some weird routing rules as our smoothwall isnt the default gateway for the core switch. Any questions feel free to shout.

What's the ips of the smoothwall box? Is the smoothwall plugged in the core switch or someware else? You will need to add the Byod vlan to the smoothwall box but its prob easier to do it with the real ips if you can post them.

It's the main no on the isdn 2 the msn on that line is going as well...

Depending on how your want the routing to work that is doable, just transparent proxy needs the traffic routing thought the smoothy.

Getting rid completely is the end game on this for us.

That sounds like my set up. You dont actually have to change any cabling. Just put the Smoothwall box as the default gateway for that vlan and away you go.

Slightly off topic, sorry! Has anyone ported a BT number into a UK based fax to email service? Looking for recommendations, we seem to be paying for an ISDN2 just for fax and answering machine message. Surely there is a cloud based way of doing this. Regards RobK

I used the cheap scroll excel tablets from cpc for a ebook scheme. Does iPlayer and kindle ok, not sure I would go for games play too much.

Fantastic that means I am no longer a new Mod! Congratulations and welcome, more hands to the war on spam.

Duck!! No more food...... Sorry bad reaction to a really great evening.....

It is probably best to get your vlans in first, otherwise you are going to end up re doing e wireless config for vlans. It really depends what you want to achieve, maybe worth adding to this thread what you want to do.

Ah BETT show new members that's great news, enjoy lady's and gents, welcome to EduGeek!

Yep, keeping Boots in business at the moment. Wouldnt miss BETT for the world though!