Sonicwall TZ210 - Set up public wifi on separate subnet & interface

Posted by thomasjbarrett on Server Fault See other posts from Server Fault or by thomasjbarrett
Published on 2012-10-08T20:25:39Z Indexed on 2014/05/30 3:31 UTC
Read the original article Hit count: 388

Filed under:
|
|

I want to set up a public wifi by connecting another router to the X6 interface, and put it on a separate subnet (192.168.10.0/24) & in the DMZ Zone to keep it away from the regular LAN. I believe I have the network settings correct: the router has acquired the IP and DNS information from the TZ210, and the TZ210 shows it as an active DHCP lease. X6 is in the DMZ.

I now have a routing/NAT/firewall problem, since I can't get any traffic to travel from the subnet to the internet. I can't get to any external websites and can't ping the TZ210 from the subnet. X0 is the regular LAN, and X1 is the WAN.

Looking for any tips or tutorials on this. Here's my current relevant rules:

Routing

Source: X6 Subnet Destination: Any Service: Any Gateway: Default Gateway Interface: X6

Source: Any Destination: X6 Subnet Service: Any Gateway: 0.0.0.0 Interface: X6

NAT Policies

Source Original: Any Translated: WAN IP Destination Original: Any Translated: Original Inbound: X6 Outbound: X1

Source Original: Any Translated: U0 IP Destination Original: Any Translated: Original Inbound: X6 Outbound: U0

Firewall

DMZ > LAN : Deny All

DMZ > WAN : Allow All

LAN > DMZ : Allow All

WAN > DMZ : Allow All

© Server Fault or respective owner

Related posts about wifi

Related posts about sonicwall