• Status: Solved
  • Priority: Low
  • Security: Public
  • Views: 167
  • Last Modified:

Watchguard Firebox and Ubiquiti

I would like to separate hard wired connections from wifi APs.  The purpose is to separate traffic and assign separate class c subnet to each group.  

Equipment used
Watchguard firebox
Qty 2 Uniquiti 24-port Poe+ 500 watts
Qty 10 Uniquiti HD access points.

Separate subnets for each group:

Hardwire users
10.1.1.1/24 on port 1 of Firebox with dchp turned in - hardwired - connects to first Uniquiti switch.  

Wifi access points
10.1.1.2/24 on port 2 of Firebox with dhcp turned on -  WiFi access points - connects to Second switch.

Problem
The second Uniquiti switch that connects the hardware connections  - port 1 disconnects or the ubiquity access points will start missing heart best and disconnect

 Firewall policy set to  any traffic can pass between the the Firebox interface ports 1 and 2.  Ping traffic passes from and to sinners with issue.

If all the devices / hard wire and access points and the two switches - are put into 1 single subnet - no issues.  

Comments would be appreciated.
0
Sunny Kim
Asked:
Sunny Kim
  • 2
2 Solutions
 
masnrockCommented:
10.1.1.1 and 10.1.1.2 are in the same subnet. Did you mean that the second subnet is 10.1.2.0/24?

The simplest method would be let the controller and APs be on the wired subnet. Note when I say the this, I am solely talking about the wireless hardware, not the wireless users. Then you can use VLANs to have wireless users on separate subnets. This would require configuration on both the switch where the APs will be and the Watchguard.
0
 
Jeremy WeisingerSenior Network Consultant / EngineerCommented:
What model Watchguard do you have? How many devices are on the network?

I agree masnrock, ideally you would have the management of the WAPs on the same network as the controller and use VLANs and tag the wireless traffic.
https://help.ubnt.com/hc/en-us/articles/219654087-UniFi-Using-VLANs-with-UniFi-Wireless-Routing-Switching-Hardware
0
 
masnrockCommented:
Answered
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Protect Your Employees from Wi-Fi Threats

As Wi-Fi growth and popularity continues to climb, not everyone understands the risks that come with connecting to public Wi-Fi or even offering Wi-Fi to employees, visitors and guests. Download the resource kit to make sure your safe wherever business takes you!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now