Creating a public wifi seperate from our private network

Posted on 2010-09-02
Last Modified: 2013-12-27
Want to setup a Watchguard firebox x10e optional network to allow clients internet access but not access to the internal network.

Watchguard is connected directly to a T1 line. (The trusted network is working fine.)
I enabled the Optional network on the Watchguard with the default ip

Enabled Optional Network DHCP is on with the range –

Plugged in a Linksys wireless access point WAP54G in access point mode to optional port on Firebox. I assigned the Linksys WAP

I can connect a computer wirelessly, the firebox optional network dhcp server assigns

But it cannot resolve internet domain names. I can ping public ip addresses.

What do I need to do to allow internet access?

Question by:AJHebert
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
  • 2
  • +2
LVL 12

Assisted Solution

mlongoh earned 250 total points
ID: 33589983
You have internet access if you can ping public IP addresses.  What is DHCP assigning as DNS servers on the optional network?
LVL 13

Accepted Solution

marine7275 earned 250 total points
ID: 33589984
you need to configure dns on the optional network on your dhcp scope. you can use
LVL 37

Expert Comment

by:Neil Russell
ID: 33590001
What does it assign for DNS etc.
On the laptop do an IPCONFIG /ALL in a CMD window and paste the output here
Online Training Solution

Drastically shorten your training time with WalkMe's advanced online training solution that Guides your trainees to action. Forget about retraining and skyrocket knowledge retention rates.


Author Comment

ID: 33590082
The DHCP is assigning the DNS assigned on the watchguard. Which works fine on the trusted side.

Optional Network settings does not seem to have an option to set the dhcp scope? Is this done in a different setting area?

Author Comment

ID: 33590194
The DNS assigned is
LVL 12

Expert Comment

ID: 33590248
That's your problem - that server is refusing queries (at least from me) and may only be configured to accept queries from nodes on it's network.  You can change it to or another public DNS server that your ISP has identified as usuable for you.
LVL 37

Expert Comment

by:Neil Russell
ID: 33590274
from the wireless connected laptop, can you ping the default gateway? Ping the DNS server? run an NSLOOKUP for, do you get a result?

Author Comment

ID: 33590333
Had to leave for the day. Will try using in the morning and post an update or hopefully assign a solution.

I pinged the and the default gateway and they ping fine.
LVL 12

Expert Comment

ID: 33590382
If you can ping public Internet addresses then you are NOT having a connection/routing problem.  You almost surely are having a DNS resolution problem.

Expert Comment

ID: 33592887
As many others have already commented, it looks like a purely DNS issue.  Check to be sure that the WAN DNS settings are getting passed to your DHCP clients -- once that is resolved, you should have no problems...should be an easy and fast fix.

Author Comment

ID: 33593001
It's weird though, as i stated on the trusted side of the firewall we have about 15 computers that connect using the same dns setting with no issues.

Author Closing Comment

ID: 33597793
Assigned and it worked fine. The client informed me today that his ISP was bought out by another company. Contacted ISP and they told me that they are in the process of changing DNS settings on the network.

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
IKEv2 on Palo Alto Networks 5050 FW 2 36
Bandwidth cap???? 8 99
Distance range for Chromecast or others 3 49
Wifi Router Confliction with Network 12 50
This article is a step by step guide on how to create a basic PTP link using Ubiquiti airOS devices. This guide can be used on the following Ubiquiti AirMAX devices. Nanostation, Bullets, AirBridge, Nanobeam, NanoBridge to name a few. Please review …
Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question