Wednesday, July 21, 2010

Sonicwall Guest Services with third party access points

Problem:  We are using an old D-Link hotspot to allow guest access in our building.  This D-Link feed a VLan that is distributed to 7 D-Link access points.  These APs support multiple SSIDs on different VLAN making them very convenient for distributing multiple wireless networks around the facility.  The new Sonicwall has Guest Services, but how can we make it all work together?  It seems like Sonicwall wants us to use their own proprietary (and expensive) access points.

In our server room we have a port dedicated to feeding the VLAN through the building.  I connected that port to X5 on our Sonicwall TZ210.  Now the configuration on the SW.

First, let’s add a new Zone and call it Guest.  For initial testing I am leaving the security settings turned off.

image image

Now let’s configure port X5 to be in our Guest zone with a static IP address of 192.168.1.1 on a standard Class C subnet.  Do this from Interfaces.  I have enabled management and ping plus user logins on this interface.  After testing I will disable the management except for Ping.  Make sure you enable login so your users can actually log in!

image

Verify a firewall rule exists for traffic from the GUEST to WAN zones.  With my firmware, this was automatically created.  I enabled some bandwidth limiting on it as well.

image

Now turn on the DHCP server for this interface with the appropriate settings.  Note that it is configured for interface X5.  Make sure the DHCP server is actually enabled in the top check box.  I forgot this part the first time around.

image

Anyone that connects to the VLAN or physical network on X5 should now receive a DHCP address in your range and be greeted in a web browser with the Sonic Wall Login page.

Adding users is very easy!  Just head down to Users|Guest Accounts and you can have them automatically generated for you or create your own.  You can also specify how long they are active for.  You can also click on Guest Status to see your logged in guests!

3 comments:

  1. Thanks, this helped me get a TP-Link AP working with my Sonicwall.

    ReplyDelete
  2. Same here. Finally got my TP-Link AP working. Thanks so much!

    ReplyDelete
  3. Hi,

    Thanks for the info.

    I am trying to setup the wifi using sonicwall 2600. I want to know do we need to have separate switch to configure the wlan or we can use the same switch where as lan

    ReplyDelete