Communications and Wireless
1748185 Members
4025 Online
108759 Solutions
New Discussion

Guest Access on WESM

 
ssAPT
Occasional Advisor

Guest Access on WESM

Hi

 

It's probably been a while since anyone worked on the old WESM modules for the 5400zl switches but hopefully someone can help.

 

I have:

vlan 10 - internal users vlan

ssid "users" - mapped to vlan 10 on wesm module and uses wpa2 etc.. this is working fine.

wesm ip on this vlan is 10.10.10.10/24

 

I create:

vlan 20 - guest access

ssid "guests" - mapped to vlan 20 on wesm module and uses web-auth and internal web pages

wesm ip on this vlan is 20.20.20.20/24

DUP is tagged in this vlan.

the WESM gives out DHCP addresses to client on this SSID.

Radius config on this SSID is primary radius server 20.20.20.20

radius client in radius config is 20.20.20.20

 

I can attach to SSID "guests" and I can get an IP address from the wesm module however I do not get the

authentication web page, i just get a timeout error and I can see that there is no redirection happenng as the browser tries to go straight to the web site I typed in.

 

I can only ping 20.20.20.20 (The wesm) and nothing else. Not even anything else on the same vlan..

 

If I set the "guests" SSID to "No Authentication" I can attach to the SSID and I can ping other addresses in the same vlan as well as addresses in vlan 10.

 

If I move the "guests" SSID to vlan 1 on the wesm than I get the authentication web page.

 

Thanks for any help/suggestions