[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Watchguard Firebox and Ubiquiti

Posted on 2017-08-13
3
Low Priority
?
85 Views
Last Modified: 2017-09-02
I would like to separate hard wired connections from wifi APs.  The purpose is to separate traffic and assign separate class c subnet to each group.  

Equipment used
Watchguard firebox
Qty 2 Uniquiti 24-port Poe+ 500 watts
Qty 10 Uniquiti HD access points.

Separate subnets for each group:

Hardwire users
10.1.1.1/24 on port 1 of Firebox with dchp turned in - hardwired - connects to first Uniquiti switch.  

Wifi access points
10.1.1.2/24 on port 2 of Firebox with dhcp turned on -  WiFi access points - connects to Second switch.

Problem
The second Uniquiti switch that connects the hardware connections  - port 1 disconnects or the ubiquity access points will start missing heart best and disconnect

 Firewall policy set to  any traffic can pass between the the Firebox interface ports 1 and 2.  Ping traffic passes from and to sinners with issue.

If all the devices / hard wire and access points and the two switches - are put into 1 single subnet - no issues.  

Comments would be appreciated.
0
Comment
Question by:Sunny Kim
  • 2
3 Comments
 
LVL 32

Accepted Solution

by:
masnrock earned 500 total points (awarded by participants)
ID: 42252848
10.1.1.1 and 10.1.1.2 are in the same subnet. Did you mean that the second subnet is 10.1.2.0/24?

The simplest method would be let the controller and APs be on the wired subnet. Note when I say the this, I am solely talking about the wireless hardware, not the wireless users. Then you can use VLANs to have wireless users on separate subnets. This would require configuration on both the switch where the APs will be and the Watchguard.
0
 
LVL 23

Assisted Solution

by:Jeremy Weisinger
Jeremy Weisinger earned 500 total points (awarded by participants)
ID: 42253643
What model Watchguard do you have? How many devices are on the network?

I agree masnrock, ideally you would have the management of the WAPs on the same network as the controller and use VLANs and tag the wireless traffic.
https://help.ubnt.com/hc/en-us/articles/219654087-UniFi-Using-VLANs-with-UniFi-Wireless-Routing-Switching-Hardware
0
 
LVL 32

Expert Comment

by:masnrock
ID: 42279473
Answered
0

Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

During and after that shift to cloud, one area that still poses a struggle for many organizations is what to do with their department file shares.
In this article, WatchGuard's Director of Security Strategy and Research Teri Radichel, takes a look at insider threats, the risk they can pose to your organization, and the best ways to defend against them.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

873 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question