This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How do I have one SSID bridged to AP LAN and one SSID bridged to VLAN?

TobiasVerbree over 8 years ago

Hello

Im trying to get the following working:

I want one SSID for access of the internal network (without vlan tagging, 192.168.43.xx) -> Bridge to AP LAN

And one SSID for our guest network (with vlan tag 40, 172.16.29.xxx) -> Bridge to VLAN

Now I want to enable this on our UTM 9.4 but its refusing his config.

Error

The VLAN settings of the access point 'xxx' conflicts with the client traffic option: 'Bridge to VLAN' of the SSID 'guestnet'.

enabling vlan tagging on ap:

The VLAN settings of the access point 'xxx' conflicts with the client traffic option: 'Bridge to AP LAN' of the SSID 'internalnet'.

In the manual on Page 435 i found the following:

<quote>

l Bridge to AP LAN: You can bridge a wireless network into the network of an access point, that means that wireless clients share the same IP address range.

Note – If VLAN is enabled, the wireless clients will be bridged into the VLAN network of the access point.

</quote>

but this isnt working?

Can anybody help me?

Thanks

Tobi

This thread was automatically locked due to age.

Parents

0 BAlfson over 8 years ago

I haven't tried this, Tobi, but I think it should work. What does Support have to say?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 TobiasVerbree over 8 years ago in reply to BAlfson

hi bob

i contacted support, we will see whats the problem...

thanks

tobi
Cancel
Vote Up 0 Vote Down

Cancel
0 sachingurung over 8 years ago in reply to TobiasVerbree

Hi Tobi,

Please send me the ticket# with support.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 TobiasVerbree over 8 years ago in reply to sachingurung

Hi

I did use the Web Form Open A Ticket under https://secure2.sophos.com/en-us/support/contact-support.aspx

I did get a reply with ticket #5998694.

Thanks.

Tobi
Cancel
Vote Up 0 Vote Down

Cancel
0 Louis-M over 8 years ago in reply to TobiasVerbree

There is definitely an issue here. I've tried all combinations and cannot get it to work.

The access point 55c (you wouldn't want one of these falling down on you!!) will not passthrough dhcp on vlans.

The 55c is connected to a Cisco 2960s switch with correctly configured vlans etc

We have 2 other test wireless access points connected to this switch (ubiquiti & hp) and they both work fine.

Both pass dhcp leases from the cisco router to the wireless clients without issue. Not the Sophos though. The client authenticates and that is it.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Louis-M over 8 years ago in reply to TobiasVerbree

There is definitely an issue here. I've tried all combinations and cannot get it to work.

The access point 55c (you wouldn't want one of these falling down on you!!) will not passthrough dhcp on vlans.

The 55c is connected to a Cisco 2960s switch with correctly configured vlans etc

We have 2 other test wireless access points connected to this switch (ubiquiti & hp) and they both work fine.

Both pass dhcp leases from the cisco router to the wireless clients without issue. Not the Sophos though. The client authenticates and that is it.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 dougga over 7 years ago in reply to Louis-M

Has this bug been resolved?
I'm interested in doing this and have run into all sorts of problems.
Cancel
Vote Up 0 Vote Down

Cancel
0 TobiasVerbree over 7 years ago in reply to dougga

hi, i resolved this for me with the following method:

i switched the access point to a new vlan (50) and used for the wlan networks other vlans (1 for production and 40 for our guest internet). that works as intended. you have to adjust your switch as well.

i never tested if the bug is resolved, in the meantime...
Cancel
Vote Up 0 Vote Down

Cancel