New VLAN isn't handing out the proper IP address-help?
WG Firebox M370; Fireware 12.8.2; WSM 12.9.0u1
I'm setting up another new VLAN for our Credit Card terminals to be segregated from the rest of our network.
I setup VLAN 70 (ccmach) with a Custom security zone; private ip-172.xxx.70.xxx, handing out IP's from .15 - .30. I only have 8 terminals. My WGfirbox will be doing the DHCP handouts.
I wanted to use Interface 2* as my connection to the Firebox; Interface Name - CCVlan, Interface type - VLAN, Send and Receive tagged traffice for selected VLANs - Yes, VLAN 70 is checked.
- send and receive untagged traffic for selected VLAN - unchecked - I don't get any IP address handed out from the Firebox.
- send and receive untagged traffic for selected VLAN - checked - I get an IP address but it's not the correct IP for VLAN 70.
If I use our main Trusted Network (VLAN 1) for the 'untagged traffic' I get an IP address from our VLAN 10 (WiFi AP Maint. vlan).
If I use our AP Maint. Vlan(10) for 'untagged traffic' I get an IP address from the AP Maint VLAN.
I have a Policy setup as:
CCMach_PCI; From-CCMach(vlan 70 alias) To- Credit Card URL's via there designated ports. SD-WAN routing out our fiber connection. Logging turned on
For Test purposes, because I wasn't getting a correct IP address when plugged into our Cisco switches, I have plugged a Pc directly into Interface 2* and these are where I'm getting the above results.
- for another test I turned off Interface 2 and switched to Interface 7 with the exact same results.
I have 4 other VLANs setup primarily for WiFi segregation, this is for a network cabled connection but not sure what I'm missing. I am concerned and questioning why I'm getting a AP Maint IP address (being the wrong IP address) when this has nothing to do with an AP.
Q: by directly connecting to the FB Interface I should get handed the correct IP address I'm expecting?
Q: could I have my AP Maint VLAN setup incorrectly somewhere causing my problem and why I'm getting an AP Maint IP address?