Wireless Access

Reply
Occasional Contributor II

redirect different ports on controller, to different physical networks

Hello,

 

On our 3600 controller, I have connected two different network cables, connected to two different networks.

 

One on a physical network, let's say our company network, a 10Mb fibre network, i.e port 0/0 on the controller.

 

One on another physical network, this is a simple ADSL conenction, i.e. port 0/1.

This would be used to broadcast a guest network for non-authenticated users in our company.

 

The meaning I would like to do  this is,  that guests don't connect to our company network, and no security issues would arise from anyone using this guest network.

 

I've configured a VLAN to use this port 0/1 but it's not connecting to the ADSL router connected to this port.

I've placed an AP 105 to be in bridged mode, so authentication and DHCP and so on is taken care on the router which the AP is connected on.

 

Could it be that I need to configure another Default gateway, specifically for this second port?

So I can add a virtual route to this ADSL router?

 

I don't know if this is even a good setup to do this?

I would only like to make  sure that there is as less possible traffic on our company nw for guests?

 

Thanks and regards

 

 

Guru Elite

Re: reditrect different ports on controller, to different physical networks

Torenhof,

 

This can be done.  Does the ADSL cable modem already give out private ip addresses to clients?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Moderator

Re: reditrect different ports on controller, to different physical networks

Make sure you have unchecked the "inter-vlan routing" checkbox on the guest network IP address

Samuel Pérez
ACMP, ACCP, ACDX#100

---

If I answerd your question, please click on "Accept as Solution".
If you find this post useful, give me kudos for it ;)
Occasional Contributor II

Re: reditrect different ports on controller, to different physical networks

Yes,

 

The ADSL router hands out private IP addresses.

 

 

Guru Elite

Re: reditrect different ports on controller, to different physical networks

Thanks for that answer.  Here is what to do:

 

If the ADSL router has a private ip address of 192.168.1.1, this is what you do:

 

- Create a VLAN and ip interface on the controller and give it an address in the same range as the ADSL router :

config t

vlan 1000

interface vlan 1000

ip address 192.168.1.250 255.255.255.0

 

- Chose a physical interface on the controller that you will connect the ADSL router to and assign it to that VLAN:

config t

interface gigabitethernet 1/3

switchport mode access

switchport access vlan 1000

 

- Make sure that the controller redirects users who connect to the captive portal to the private VLAN interface:

config t

ip cp-redirect-address 192.168.1.250

 

- Run the WLAN/LAN wizard and create a guest network on that VLAN:

Configuration> WLAN/LAN Wizard

 

Let us know how you do.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: reditrect different ports on controller, to different physical networks

works like a charm.

Thank you very much.

 

I haven't used the captive portal, but only a WPA2/PSK with a passphrase.

 

Guru Elite

Re: reditrect different ports on controller, to different physical networks

Glad to hear you got it working!



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: reditrect different ports on controller, to different physical networks

all seems to work fine except I have some users that can connect to the wireless guest network, they get an correct IP address and so on, but they cant surf or do anything using this network.

 

It is a combination of devices that use this network: IPAD's, Android phones, laptops, ...

 

If I look on the controller I can see that they all get an correct IP address, but when I look to the debug output of a connected client, I get the following error msg:

MAC=44:a7:cf:c2:51:97 IP=192.168.1.3 User miss: ingress=0x12b4, VLAN=50

 

Could it be that the controller blocks these devices?

Because when they try to connect to the ADSL router directly, wireless, they can surf immediatly

 

Also, how can I disconnect a client that is using this guest_network from the controller or using CLI?

 

Thanks in advance for your answers

Guru Elite

Re: reditrect different ports on controller, to different physical networks

Are you using Captive Portal or do you just have an open network?

 

The user-miss just means a user who was not on the controller previously has been added.

 

To delete a user on the commandline, use "aaa user delete"

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: reditrect different ports on controller, to different physical networks

It's just an network with a WPA/2PSK

when they enter the correct PSK, they should be able to use the network.

 

It's weird that some devices have this issue and others don't

 

 

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: