Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Issues routing vlan traffic on Cisco SF 302-08MP

Hi all,

I’ve configured a small WLAN for a school that wants to have wireless network access for their staff as well as for guests doing presentations. They want the staff to have access to everything on the 192.168.1.0 /24 network as well as the Internet. They want the guests to only have access to the Internet.

I have attached a picture which shows how the network has been configured with 4 Cisco AP1242G AP’s attached to a Cisco SF302-08MP PoE switch and then to a Symantec Security Gateway to the Internet.

I can authenticate wirelessly to the STAFF SSID and ping anything on the 192.168.1.0 /24 network and access the Internet.

I can authenticate wirelessly to the GUEST SSID and ping anything on the 172.16.1.0 /24 network, but not anything on the 192.168.1.0 /24 network (which is what we want). However, when on the GUEST network you can’t access the Internet. I added a default route to the Cisco 302-08MP switch to 192.168.1.1 (Symantec firewall) thinking that would forward the traffic from 172.16.1.0 /24 to the Symantec firewall out to the Internet, but that isn’t working.

How would I go about getting the traffic from 172.16.1.0 /24 to hit the Symantec firewall and the Internet, without hitting anything else on 192.168.1.0 /24? Do I need to put the Symantec firewall in a different subnet like 192.168.2.0 /24? Am I missing anything else?

I’ve worked with Extreme Networks & HP / 3Com CLI in the past, but never with Cisco and never with web based management. I volunteered to help this small private school with their network setup, but I need some help to get past this hurdle. Any direction / assistance anyone can provide would be very much appreciated!!!

Thanks,

Mason

Everyone's tags (2)
1 REPLY
Silver

Issues routing vlan traffic on Cisco SF 302-08MP

Mason,

Please contact the Cisco Small Business Support Center and open a support case with next available engineer. I'm thinking we can just write ACL's to accomplish what you are needing but would rather you do this on the phone with us.

1-866-606-1866

Jasbryan

832
Views
0
Helpful
1
Replies
CreatePlease to create content