{"id":246,"date":"2017-08-13T16:55:08","date_gmt":"2017-08-13T20:55:08","guid":{"rendered":"http:\/\/puluka.com\/home\/?p=246"},"modified":"2017-08-13T16:55:08","modified_gmt":"2017-08-13T20:55:08","slug":"screenos-configure-guest-external-wap-segment","status":"publish","type":"post","link":"http:\/\/puluka.com\/home\/networking\/screenos\/screenos-configure-guest-external-wap-segment\/","title":{"rendered":"ScreenOS: Configure Guest External WAP Segment"},"content":{"rendered":"<p><strong>Product<\/strong>: ScreenOS<br \/>\n<strong>Version<\/strong>: Tested Version 6 and up<\/p>\n<h2>Network Topology:<\/h2>\n<p>Connecting WAP to SSG port ethernet0\/6<br \/>\nThis removes ethernet0\/6 from the default trust bgroup0 for isolation<\/p>\n<h2>Description:<\/h2>\n<p>Provide a Guest Wireless Access Point (WAP) on a non-wireless enabled SSG firewall. Configured with a security zone guestwifi that has internet access only and no allowed connections to other segments.<\/p>\n<h2>Configuration:<\/h2>\n<p>Attachement is PDF file with web UI screen shots <a href=\"http:\/\/puluka.com\/home\/assets\/documents\/ScreenOSGuestWAP.pdf\">Web US Instructions<\/a><\/p>\n<p><strong>CLI Instructions<\/strong><\/p>\n<p>1.Create guestwifi security zone<br \/>\nset zone name guestwifi<\/p>\n<p>2.Remove etherent0\/6 from bgroup0<br \/>\nunset interface bgroup0 port ethernet0\/6<\/p>\n<p>3.Assign ethernet0\/6 to wifi zone and give ip address 172.16.1.1\/24<br \/>\nset interface ethernet0\/6 zone guestwifi<br \/>\nset interface ethernet0\/6 ip 172.16.1.1\/24<\/p>\n<p>4.Create policy from guestwifi to untrust with nat for internet access<br \/>\nset policy name GuestWifi from guestwifi to untrust any any any nat src permit<\/p>\n<p>5.Create dhcp server on guestwifi zone (only if this is not provided on external WAP)<br \/>\nset interface ethernet0\/6 dhcp server service<br \/>\nset interface ethernet0\/6 dhcp server auto<br \/>\nset interface ethernet0\/6 dhcp server option gateway 172.16.1.1<br \/>\nset interface ethernet0\/6 dhcp server option netmask 255.255.255.0<br \/>\nset interface ethernet0\/6 dhcp server option dns1 a.b.c.d<br \/>\nset interface ethernet0\/6 dhcp server ip 172.16.1.10 to 172.16.1.99<\/p>\n<p>6.WAP Configuration:<br \/>\n* Configure external WAP with 172.16.1.2\/24 address and a default gateway of 172.16.1.1<br \/>\nor set the device to dhcp if supported<br \/>\n* Configure the desired wireless security settings on the WAP<\/p>\n<h2>Verification:<\/h2>\n<p>Connect on the new wireless segment and confirm internet access.<\/p>\n<p>Originally Posted November 27, 2010<br \/>\nLast Revised on November 27, 2010<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Product: ScreenOS Version: Tested Version 6 and up Network Topology: Connecting WAP to SSG port ethernet0\/6 This removes ethernet0\/6 from the default trust bgroup0 for isolation Description: Provide a Guest Wireless Access Point (WAP) on [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"class_list":["post-246","post","type-post","status-publish","format-standard","hentry","category-screenos"],"_links":{"self":[{"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/posts\/246","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/comments?post=246"}],"version-history":[{"count":1,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/posts\/246\/revisions"}],"predecessor-version":[{"id":247,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/posts\/246\/revisions\/247"}],"wp:attachment":[{"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/media?parent=246"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/categories?post=246"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/puluka.com\/home\/wp-json\/wp\/v2\/tags?post=246"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}