Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Watchguard Firebox and Ubiquiti

Posted on 2017-08-13
3
Low Priority
?
65 Views
Last Modified: 2017-09-02
I would like to separate hard wired connections from wifi APs.  The purpose is to separate traffic and assign separate class c subnet to each group.  

Equipment used
Watchguard firebox
Qty 2 Uniquiti 24-port Poe+ 500 watts
Qty 10 Uniquiti HD access points.

Separate subnets for each group:

Hardwire users
10.1.1.1/24 on port 1 of Firebox with dchp turned in - hardwired - connects to first Uniquiti switch.  

Wifi access points
10.1.1.2/24 on port 2 of Firebox with dhcp turned on -  WiFi access points - connects to Second switch.

Problem
The second Uniquiti switch that connects the hardware connections  - port 1 disconnects or the ubiquity access points will start missing heart best and disconnect

 Firewall policy set to  any traffic can pass between the the Firebox interface ports 1 and 2.  Ping traffic passes from and to sinners with issue.

If all the devices / hard wire and access points and the two switches - are put into 1 single subnet - no issues.  

Comments would be appreciated.
0
Comment
Question by:Sunny Kim
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 31

Accepted Solution

by:
masnrock earned 500 total points (awarded by participants)
ID: 42252848
10.1.1.1 and 10.1.1.2 are in the same subnet. Did you mean that the second subnet is 10.1.2.0/24?

The simplest method would be let the controller and APs be on the wired subnet. Note when I say the this, I am solely talking about the wireless hardware, not the wireless users. Then you can use VLANs to have wireless users on separate subnets. This would require configuration on both the switch where the APs will be and the Watchguard.
0
 
LVL 22

Assisted Solution

by:Jeremy Weisinger
Jeremy Weisinger earned 500 total points (awarded by participants)
ID: 42253643
What model Watchguard do you have? How many devices are on the network?

I agree masnrock, ideally you would have the management of the WAPs on the same network as the controller and use VLANs and tag the wireless traffic.
https://help.ubnt.com/hc/en-us/articles/219654087-UniFi-Using-VLANs-with-UniFi-Wireless-Routing-Switching-Hardware
0
 
LVL 31

Expert Comment

by:masnrock
ID: 42279473
Answered
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Originally, this post was published on Monitis Blog, you can check it here . It goes without saying that technology has transformed society and the very nature of how we live, work, and communicate in ways that would’ve been incomprehensible 5 ye…
Make the most of your online learning experience.
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
Suggested Courses

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question