Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About No_Traffic
No_Traffic
Comes here often
Member since Dec 13, 2019
Oct 4 2022
Community Record
9
Posts
0
Kudos
0
Solutions
Badges
Jun 22 2022
3:05 PM
I setup a remote office with a Sophos XG firewall and Meraki MR45 AP. The Meraki AP has a POE injector and is plugged directly into the Sophos. We have two SSIDs broadcasted, one Corp WLAN via RADIUS server and a guest/mobile WLAN. Users who connect to the Corp WLAN get an IP in the correct range and can pass traffic and connect to the domain controllers and corp network just fine. There is VLAN tagging on the Corp WLAN. However, when users connect to the guest/mobile WLAN, they get the correct IP from the IP range but they are unable to pass traffic. The VLAN is tagged correctly. The Sophos acts as the DHCP server, and the DNS it serves is set to 8.8.8.8 and 8.8.4.4. When I check the Sophos firewall, I see the firewall allowing traffic. When I check the logs I see DNS failures for that SSID. However, I'm not sure if this is actually an DNS issue as I had the remote user try to access websites by IP address and it fails. I don't have this problem at any of our other sites and the SSID for the mobile/guest network is templated from our other site. One piece that is different at this site is there is no Meraki switch which is probably not the issue. Also, if I disable VLAN tagging for the mobile/guest SSID, it puts it on the default VLAN (as it should) and is able to connect and pass traffic. This obviously isn't what I want since it's on the corporate network. Any ideas how to troubleshoot?
... View more
May 24 2022
8:19 AM
Thank you all, I'm having our consultant do a factory reset when he goes back into the office next. I'll keep you updated.
... View more
@PhilipDAth wrote: I quite like using wired 802.1x. Then you can simply search by username. Ugh yes please. My clients are not a fan of wired 802.1x sadly. Love being able to search things by username. Not sure who that VPN client is? You can tell by user name. Wireless client on 802.1x? User name.
... View more
Feb 20 2020
3:33 PM
"subsequent hosts must have matching VLAN information" it means the wired 802.1x info? Try use the radius authorization rule to assign the vlan id for the 2nd data domain device.
... View more
Dec 13 2019
8:50 PM
1 Kudo
I encounter the "Connected no internet" message when accessing a known krap WiFi service from a Win 10 laptop. I suspect it is caused by chip set incompatibilities. My solution Tether a smartphone to the laptop. If still having difficulties restart the smartphone If that doesn't work stand under the closest WiFi AP and restart the phone, sometimes a "marginal" signal causes problems obtaining an IP address Not ideal, but it works.
... View more
© 2024 Cisco Systems, Inc.
