Sophos Central Wireless IP assignment and Traffic route

Ok I just saw this  : 

Hi Ryan,

Thank you for reaching out to Sophos Community.

Kindly try to check the following Recommended Read, which might assist you. 

 Sophos Firewall: Managing APX on Sophos Central with DHCP server on Sophos Firewall 

For the second query, are you referring to the following? The only option is Access Point itself.

Thanks , If the wifi zone is on a separate network than the LAN , but not on  VLAN . 

Is there a way to have the APs give out IPs from that range ? 

For example is the LAN Staff is : 192.168.10.0 

Staff wifi is : 192.168.11.0 , currently on the FW  (No Vlan)

Is there a way to give that address range 192.168.11.0 SSID from Sophos Central  :, keep the APS on 192.168.10.0

Hi Ryan,

To verify, your local network is 192.168.10.0. Then you want to broadcast an SSID with a 192.168.11.0 IP address? Is this correct

You can try the following Setup if applicable to your setup.

1. Create a new interface vLAN with a network of 192.168.11.0/24
2. Create New DHCP with 192.168.11.0/24 attach it to the newly created vLAN
3. Create SSID on Central with client connection to vLAN
4. Set up the allow Firewall Rule

This will broadcast an SSID on Central with an IP range of 192.168.11.0 while retaining the  FW local LAN address of 192.168.10.0.

Hi Ryan,

To verify, your local network is 192.168.10.0. Then you want to broadcast an SSID with a 192.168.11.0 IP address? Is this correct

You can try the following Setup if applicable to your setup.

1. Create a new interface vLAN with a network of 192.168.11.0/24
2. Create New DHCP with 192.168.11.0/24 attach it to the newly created vLAN
3. Create SSID on Central with client connection to vLAN
4. Set up the allow Firewall Rule

This will broadcast an SSID on Central with an IP range of 192.168.11.0 while retaining the  FW local LAN address of 192.168.10.0.

Thanks for the reply, So this is one way of doing it correct. 

But believe it or not , The avoidance of using Vlans needs to stay on the table for now. 

As Vlans would need to configured on the switches that APs are connected to . (the person doesnt want to do this)

Is there anyway to have the non vlan network assigned to an SSID.