1

Implementing an isolated guest WLAN via IPSec VPN on Windows

view story
linux-howto

http://serverfault.com – We are attempting to set up a guest WLAN network that is isolated from the rest of our network. This is proving difficult due to a couple of technical reasons. My first choice was to use a separate VLAN, on which our Firewall's handy WLAN port would handle DHCP, DNS and the network isolation we need. Unfortunately, due to the fact that our main office and our Internet connection itself are in different locations connected by way of a Metro Ethernet connection, I'm at the mercy of our ISP for VLAN transit. They won't pass a second VLAN between our two sites. And my hardware doesn't support 802 (HowTos)

taskli's picture
Submitted by taskli on 06/19/2012

Stories similar to Implementing an isolated guest WLAN via IPSec VPN on Windows

I have a cisco asa5505 as my rtr/fw(10.1.3.254).

I'm new here and also with networking but i can't set internet conection for some vlan created.

I have a Cisco CE500 switch and created 4 vlans define by the roles in the switch. Vlan 2: Servers (role) (port 3-4) Vlan 3: Desktop (role) (port 5-8) Vlan 4: Guest (role) (port 9-12)

Vlan 1 is default, Connect to the ADSL Modem/Router Port 2 assign to the Router Role (vlan 1)

The switch is connected

I have the following scenario:

I have a Cisco Aironet 1040 access point. I have it configured with two SSIDs, each going to a different VLAN.

I'm having a really, really weird issue with one of the Windows 7 laptops in our office.

When it connected to our office network (either by WiFi or cabled connection), everything except browsing the web works fine. It can receive emails via Exchange, initiate VPNs, copy files, connect to network resources, it can ping websites (like google, etc), nslookupis fine.

First of all I'm relatively new to VLANs. I have a ZyXEL GS-1524 switch and two networks that I want to keep separate, but they need to use the same router. The router is on port 22, ports 17 and 18 belong to the first network, and all other ones to the second.

The issue is that my switch requires all ports to be on VLAN 1.

I have a Supermicro X9DRD-IF motherboard with IPMI onboard. I'm completely losing network (both IPMI and OS) after adding VLAN support in OS network configuration. Network cable is connected into LAN1 port. IPMI is configured as shared. IPMI VLAN is not set. IPMI firmware was updated to latest version. Network comes with VLAN 171 untagged (XX.XX.XX.0/26) and VLAN 169 (YY.YY.YY.128/27) tagged.

We've a Windows Server 2008 host on VMware ESXi 4 and want to isolate it from the rest of the network. That is, I want no traffic from the Windows Server 2008 to be allowed on the normal network.

Just created network install CD and installed on T42 laptop. I must start by saying the installer is even better than ever. Detected all the relevant hardware and that connection to internet needed wlan. Prompted for IDs and passphrase and the wlan connection worked as usual. The installation completed once basic info input, unattended, in a couple of hours.

So the setup looks like this:

There is a main WLAN-router/modem which is connected to the internet and serves the lower floor with WLAN. Now upstairs I have a second WLAN-router/modem (I will call it router two from now on). A normal ethernet cable is plugged in in router two in one of the four ethernet ports and also in one of the four ethernet ports in router one.