1

I just joined a new company and I am trying to correctly configure our guest wifi, get it secured and outside of our DMZ.

At this point in time, I am unsure of how to best configure our Sonicwall. Currently, under the network interfaces settings, I have the OPT interface set with a zone type of DMZ. The IP Address is set on a different subnet from our LAN and WAN interfac and the IP is set as Static.

When I connect the Meraki to the OPT port, the signal lights cycle, indicating that it is unable to find an IP.

Our network flow is as follows...

ATT Modem (Bridged) > Sonicwall (NAT) > Switch

I don't know if I need to set a static IP on the Meraki and have it double NAT, or what.

Thank you!!

1
  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin
    Aug 12, 2017 at 17:47

1 Answer 1

2

You likely don't have a DHCP scope configured for the OPT interface (in the DMZ Zone). I don't have a TZ 190 or a device with that older SonicOS 4.x firmware but you can do one of two things:

  • Configure a DHCP scope so the Meraki AP can obtain an IP and access the internet: go to Network, DHCP Server and see if you can add a Dynamic DHCP scope for the OPT interface.
  • Configure a Static IP on the Meraki AP so it can access the internet. You may need to connect it to your LAN port first, allow it to obtain (via DHCP) an IP address, then configure the Static IP (on the OPT subnet) in the Meraki cloud config (or, I think depending on the firmware, log into that AP directly using the IP it has on the LAN and assign it an IP in the OPT subnet)

Meraki APs need IPs with internet access as they connect to the cloud-based controller network. Without a Static IP or DHCP on the OPT subnet it has no IP.

Whether you configure the NAT on the Meraki (for the Guest Network) won't change, you can either leave the Meraki clients on the OPT network and manage them with the SonicWALL, OR configure the Meraki Guest network (which enabled a mini-router on the Meraki AP which does NAT and creates a 10.x.x.x Guest network) and manage the guests on the Meraki (this would be Double NAT).

If you manage the Guests on the Meraki you might as well leave the Meraki on the LAN subnet since it will keep them isolated from the local management network. But if you wanted to have, say, your internal Wireless users on the OPT/DMZ subnet BUT ALSO have Guests on a separate subnet then putting the Meraki on OPT and configure Meraki controlled Guests is the right idea.

Or you can configure VLAN subinterfaces if you have a managed switch and run several subnets that way, all managed from your SonicWALL.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.