Comments

  • I think the original POE switch wasn't properly recognizing the VLAN setup; installed a proper managed POE switch and at least the Watchguard now sees traffic on the two configured VLANs (internal and guest). I thought Trusted interfaces allowed traffic to pass freely between each other though; looks like I have to set up…
  • I'm using an existing POE switch (Unifi) so it might be something to do with the way the switch is managed; even though a "profile" with the tagged VLANs has been applied, I'm not convinced it's properly passing the tags. Will get a more standard managed POE+ switch that doesn't require an app to manage.
  • Bruce, I made one change on the Interface settings: Send & receive tagged traffic for the selected VLAN: VLAN-A (internal) Send and receive untagged traffic for selected VLAN: VLAN-B (external); on the access point, this WLAN is designated "native VLAN" with no VLAN ID). which lets the external Wifi network function as…
  • I did set up as: Interface: VLAN VLAN-A (Trusted) VLAN-B (Optional) Outbound (Any-Trusted, Any-Optional) and also tried adding VLAN-A and VLAN-B explicitly to the Outbound rule. These are current Aruba access points set up through Aruba Central with the respective WLANs configured for VLAN-A and VLAN-B IDs. I have a…
  • Hi Bruce, I've reversed the settings for now, but it's the standard Deny/Unhandled Packet message for that interface. I'll do some more testing this weekend when staff are out of the office.