- Configure both SSIDs in the wap admin page.
- Turn on vlans , configure guest access for vlan 2 (or whatever you what).
- On ssg5(firewall) configure a SubInterface bgroup0.2 and assign vlan 2.
- Put bgroup0.2 in the DMZ.
- Configure dhcp on the DMZ.
- Add policy from DMZ to Untrust (any to any) , make sure to go to advanced under policy and check source NAT or you won't be able to get online from vlan 2.
- At this point you can connect to the guest SSID and you should get ip in DMZ (vlan 2). Also, test to make sure you can only get on internet not the main network.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment