115w - do these actually work?

Question

Set up our first 115w today and ran into problems when we got to enabling wireless. A guest network set up in a separate zone worked fine, but trying to set up another network that will share the main LAN appears to be impossible. Choosing "bridge with AP LAN" results in being unable to check the box to assign the network to the access point.

Called support and their less-than-impressive response was "umm I don't think it should do that but I don't really know and let me escalate this and someone will reach out in a few hours" but of course no one has.

Anyone know if there is a bug that prevents this from working the way it's supposed to on these new integrated boxes?

Thanks!

This thread was automatically locked due to age.

BAlfson · Answer

Tested with 9.306, this process adds about 20 minutes to the initial configuration. The only possible issue is that you won't be able to do QoS on eth0 (Internal). I only recommend doing QoS on the External interface, so this solution should be fine for everyone. The problem is that you can't Bridge-to-LAN with built-in wireless. The solution: 
 
 After the initial setup, login, rename the Internal interface to " OldInternal " and move it to eth2. You will then need to move your Ethernet cable to eth2 and login again to WebAdmin. 
 Configure Wireless Protection. Create "Guest" as a "Separate Zone" and "InternalW" as a "Standalone Interface" and then assign them to the built-in AP. 
 In 'Interfaces & Routing', Edit "WirelessBridgebr101" to change its name to " Internal ," select to bridge it to "eth0" and assign the IP and netmask (must not conflict with "OldInternal (Network)"). 
 Create a DHCP server for "Guest" and, if you don't already have a separate one for your internal LAN, create one for "Internal." 
 Go to 'Definitions & Users >> Network Definitions' and click on the blue information dot to the right of " OldInternal (Address)." Using the Windows "Snipping Tool," take a picture of the section 'Used in these configurations'. For each item except those in 'Interfaces & Routing', do the following:
 
 Edit the item in question 
 Delete the "OldInternal (Network)" object 
 Drag in the new "Internal (Network)" object 
 Save

Return to 'Definitions & Users >> Network Definitions' and check that the only entries left for "OldInternal (Network)" are those for 'Interfaces & Routing'. 
 Move the internal LAN cable back to eth0, and login to WebAdmin at the new IP - don't forget to change the properties of your Windows adapter to access the new IP. 
 If you're satisfied that you've made all of the necessary changes, you can now delete the "OldInternal" interface in 'Interfaces'. 
 
 This should leave you with an "InternalW" WiFi network bridged to your internal LAN and a separate network for your guests. You will still need to add firewall and masquerading rules. 
 Please post suggested changes to this list. Cheers - Bob

KingRolo · Answer

This was published recently: 
 
 https://community.sophos.com/kb/en-us/127508 
 
 Regards