Bridge wlan and ethernet port on SG310

Hi, BAlfson

Thank you for your reply. I guess I was a bit unclear. You can say I want two separate instances of wireless networks bridged to each of its seperate LANs.

Here is my what we have now:

A wireless network ("Staff") bridged to AP LAN. Interface eth0 and subnet 10.70.32.x. Radius authentication and DHCP is handled by our local server 2019. All access points and desktop PCs are connected to this network.

We also have an additional wireless network ("kltv") for students and guests. Interface wlan0 and subnet 10.21.32.x. Radius authentication on server 2019 and dhcp handled by dhcp server on the UTM itself.

All is working fine.

Here is what I am trying to do:
I want to add a LAN (add an a new unused ethernet port on the UTM) on the same subnet as "kltv" so I can have both wired and wireless devices on the same subnet. I have tried to change the interface type to "Ethernet Bridge" on the kltv interface and bridge NICs wlan0 and eth6. The problem is that now only the wired clients gets an ip (10.21.32.x), the wireless client can't. When I change back the kltv interface to "Ethernet" the wireless works again, but of course I loose the wired part on eth6.

I have also tried to create a new wireless network with WPA2 personal authentication so that all is handled only by the UTM itself, but same result.

I hope this makes it a bit clearer what I want to achieve. I been working on this for days reading, searching the web and this forum and I think i should be possible.

I really hope that you or someone else in here can point me in the right direction or at least say it isn't possible to have this setup.

Kind regards,

Please insert a picture of the Edit of the kitv Wireless Network.

Cheers - Bob

Sure.

Edit wireless:

And also edit interface:

I think everything is right. Not working though :-(

Kind regards,

That looks perfect.  What happens if you do the following?

1. Edit kltv
2. Uncheck wlan0
3. Check eth7
4. Save
5. Edit kltv
6. Uncheck eth7
7. Change to Ethernet
8. Save
9. Edit kltv
10. Change to Ethernet Bridge
11. Check wlan0
12. Save

If that doesn't resolve this, maybe you need another EtherType.  It would time to get Sophos Support involved.

Cheers  - Bob

Hi, BAlfson

I think I already have tried something like that, but I will give it another go on monday.

Frustrating, but at least I read your replies as "this should be possible".

Thanks.

I set this up for a client almost 5 years ago:

Cheers - Bob

Hi again

I have tried your above suggestion, but the wlan on the list is missing. I can only choose from my unused eth ports.
There is a strange thing though. The wlan actually shows up on the list, but disappears almost immediately. It looks buggy, but I could be wrong. I have attached a video of the behaviour.

By the way, I tried a few other things and reconfigured a bit, so the kltv is now wlan2 in the video.

Hi again

I have tried your above suggestion, but the wlan on the list is missing. I can only choose from my unused eth ports.
There is a strange thing though. The wlan actually shows up on the list, but disappears almost immediately. It looks buggy, but I could be wrong. I have attached a video of the behaviour.

By the way, I tried a few other things and reconfigured a bit, so the kltv is now wlan2 in the video.

Definitely you will want to get a case started with Sophos Support.  Show us what you get with the following command as root:

     cc get_object_by_name itfhw awe_network 'kltv'

Cheers - Bob

I get '0'

Strange.  What do you see with: 

    cc get_objects itfhw awe_network|grep \'name

Cheers - Bob

Yes, it looks strange. My other wlan also says '0'.

When I type cc get_objects itfhw awe_network|grep \'name, I get:

'name' => 'wlan0 (Remote Wireless Network)',
'name' => 'wlan2 (Remote Wireless Network)',
'name' => 'MJS',

There is no wlan1.  What do you see with:

     cc get_object_by_name itfhw awe_network MJS

Cheers - Bob

I get this:

fw01:/home/login # cc get_object_by_name itfhw awe_network MJS
{
          'autoname' => 0,
          'class' => 'itfhw',
          'data' => {
                      'ap_bridgemode' => 'lan',
                      'bridge' => '',
                      'client_isolation' => 0,
                      'comment' => '',
                      'crypto_alg' => 'aes',
                      'description' => 'Remote Wireless Network',
                      'dot11r' => 0,
                      'dynamic_vlan' => 0,
                      'encryption_mode' => 'wpa2_enterprise',
                      'freq_bands' => 'ag',
                      'hardware' => 'wlan1',
                      'hide_ssid' => 0,
                      'interface_name' => 'wifi1',
                      'mac' => 'xxxx',
                      'mac_filter' => 'disable',
                      'mac_list' => '',
                      'mesh_id' => '',
                      'mesh_mode' => 'none',
                      'mesh_subtag' => '',
                      'name' => 'MJS',
                      'network_mode' => 'mixed_bgn',
                      'network_name' => 'MJS',
                      'psk' => '',
                      'r0kh_secret' => 'xxxxxxxxx',
                      'ssid' => 'MJS',
                      'ssid_vlantag' => '',
                      'status' => 1,
                      'time_scheduling' => 0,
                      'time_select' => [],
                      'uapsd' => 1,
                      'utf8_ssid' => 1,
                      'vlantag' => 101,
                      'wep128' => '',
                      'wep_authentication' => 'open'
                    },
          'hidden' => 0,
          'lock' => '',
          'nodel' => '',
          'ref' => 'REF_ItfAwe2',
          'type' => 'awe_network'

I've put in the x's.

     ap_bridgemode' => 'lan',

That's bridged to LAN.  What happens if you delete that wireless network and create a new one identical to it, but not bridged to the LAN?

Cheers - Bob

Hi, BAlfson

I really appreciate your help. That would mess up our network a little bit. Luckily it's holidays next week, so I give it a try tomorrow and see if it at least will enable me to create that ethernet bridge between eth6 and wlan2. If that is what you are suggesting.

Hi again

It didn't make a difference. I even deleted all my wlans and recreated them, but I still am unable to create that ethernet bridge.

I hope you have started a Support case ,cause this is a strange one!

Let's try the following commands again:

     cc get_objects itfhw awe_network|grep \'name

and

     cc get_object_by_name itfhw awe_network ????

Cheers - Bob