Wireless Access

Reply
Occasional Contributor I

No Internet on guest Wi-Fi

I'm having trouble getting my Aruba Instant WAPs to play nice on the network. I have a Unifi switch and pfSense firewall.

 

The guest Wi-Fi is set up in the controller on a 172.16/24 net and VLAN 99 with DHCP from the network. The LAN is a 10/24 net and the default VLAN.

 

Wi-Fi devices can get an IP on the correct network, but can't get out to the Internet, nor even ping the default gateway.

 

The Unifi switch is set up with a LAN and Guest network, with the appropriate networks and VLANs. There are no restrictions on the firewall on the guest LAN interface.

 

Since the WAPs'/controller's management IP is on the LAN, the switch ports they're connected to are set for VLAN trunking (all networks).

 

I'm stumped. Anyone have an extra clue they can toss my way?

 

Thanks.

Aruba Employee

Re: No Internet on guest Wi-Fi

Start with the local guest subnet. What is the DHCP server that guest client devices report are assigning IP addresses? Is this the server you expect it to be?


Charlie Clemmer
Aruba Customer Engineering
Occasional Contributor I

Re: No Internet on guest Wi-Fi

Hi Charlie,

 

Yep, the DHCP server is the correct one.

 

What's next?

 

Brad

Re: No Internet on guest Wi-Fi

If you hard wire a laptop in that VLAN on a switchport, is the traffic going through ?

Also, what role is the device into on the IAP ?

Cheers,

ACMP, ACCP, BCNE
Satori Internetworking
http://www.net-satori.ca/
Aruba Employee

Re: No Internet on guest Wi-Fi

What is the DHCP server?


Charlie Clemmer
Aruba Customer Engineering
Occasional Contributor I

Re: No Internet on guest Wi-Fi

172.16.36.1, which is the correct interface on the firewall.

 

I should clarify that we have two physical interfaces on the firewall, both of which are plugged into the same switch.

 

My expectation is that assigned VLAN 99 to the Guest interface on the firewall, combined with assigning VLAN 99 to the Guest Wi-Fi network in the IAP, along with VLAN trunk ports on the switch for the APs, would solve this.

Occasional Contributor I

Re: No Internet on guest Wi-Fi

Thanks, Overclock.

 

I'm working from remote, so it'll be a bit of work to test an ethernet connection on that VLAN, but that's a good idea.

 

The WiFi network is setup as guest, although I've tried with it set to corporate, too. I can't see any restrictions based on the guest assignment, though.

Aruba Employee

Re: No Internet on guest Wi-Fi


@PCSBradwrote:

172.16.36.1, which is the correct interface on the firewall.

 

I should clarify that we have two physical interfaces on the firewall, both of which are plugged into the same switch.

 

My expectation is that assigned VLAN 99 to the Guest interface on the firewall, combined with assigning VLAN 99 to the Guest Wi-Fi network in the IAP, along with VLAN trunk ports on the switch for the APs, would solve this.


Okay, guest devices are connected to the VLAN and get an IP address of 172.16.36.x, the the firewall that's at 172.16.36.1, correct?

 

Is 172.16.36.1 the default gateway that you're trying to ping unsuccessfully as well?


Charlie Clemmer
Aruba Customer Engineering
Occasional Contributor I

Re: No Internet on guest Wi-Fi


@cclemmerwrote:

@PCSBrad

Okay, guest devices are connected to the VLAN and get an IP address of 172.16.36.x, the the firewall that's at 172.16.36.1, correct?

 

Is 172.16.36.1 the default gateway that you're trying to ping unsuccessfully as well?


 Yes, guests are on VLAN 99 and are getting 172.16.36/24 IPs from the firewall (and default gateway) at 172.16.31.1.

Aruba Employee

Re: No Internet on guest Wi-Fi

 

 Yes, guests are on VLAN 99 and are getting 172.16.36/24 IPs from the firewall (and default gateway) at 172.16.31.1.


Guests are getting IP addresses from 172.16.36.x/24, but the default gateway is not on their local subnet (172.16.31.1)??


Charlie Clemmer
Aruba Customer Engineering
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: