Speedydowt

Fantastic, no I hadn't seen this, very interesting read indeed thank you for the heads up! be really interesting to get a copy of the virtual smoothwall as well

Hi Everyone, Just looking at various ways of how to do this, we have a wireless meru network setup which we can happily use a captive portal with radius authentication with. However ideally what we like to do is have the captive portal authenticate the user for the wireless system (thus allowing them onto the wireless network) and also using the same set of credentials authenticate them against the Smoothwall firewall as well at the same time using the same details from the captive portal submissions (which will be the user's AD credentials) Almost like Single Sign on but using one RADIUS submission. I know there are better ways of doing this (for example we could use Radius based VLANS then apply ACL's on the smoothwall per VLAN) but just wondered what everyone's thoughts were cheers Tom

Meru Aps can either discover the controller via L2 (MAC address) or via L3 (Ip addressing). If your AP cannot find the controller it is most likely because their is no L2 connectivity between AP and controller and the IP address set is wrong. Best thing to do in this situation is to plug the AP into the same switch the controller is plugged into and make sure they are on the same native VLAN. Once the AP has found the controller, you can then configure the IP/DG and controller ip and move to a different VLAN or network segment if needed.

This is mostly likely due to the way Mac interpret hidden shares on NTFS, with Windows the $ sign indicates that the share is not to be visible in the list of shared folders. However a MAC seems to think the $ donates the end of the share path and won't look any further beyond that. The best way round this is to enable access based enumeration on the root of the users share and make sure your NTFS permissions are set accordingly.

its really great that you guys actually have this setup, make me see the "light at the end of the tunnel". thanks very much for your insight!

This is awesome localzuk, how are you finding the 802.1x based vlans through wifi? Must be annoying to setup!

Hey Everyone! Just wondering if anyone has implemented RADIUS based VLANs on their organisation/school, be very interested in how you did it! cheers Tom (wow it turned out I cannot spell Radius- sorry all!)

Cool, fair enough- I guess I wanted to find an excuse to do it

That is a very good point indeed. I'd really like to know this as well! My thoughts are that it would be temporary as don't you need option 252 set in DHCP for the PAC file to be set? Therefore when students go home they get DHCP through there router and are no longer prompted to look for the wpad.pac file. Having said that- this would work because when kids go home they don't want a proxy set anyway!

Hi everyone! We have a Meru MC3200 at our school and was wondering what the best practice is regarding VLANs. We currently have a VLAN tunnel setup on the controller that puts anyone connecting to a particular SSID into that vlan. However all of our APS and controller are still on the "main" data vlan. Is it best practice to put both the APs and Controllers onto a seperate VLAN as well? Our Network is mid sized comprising of around 40aps, 300Pcs and 100 laptops. Typical wireless usuage is around 100-150 clients daily. My apologies if I have missed off some cruicial information! and many thanks for your help Many thanks Tom