1

I have one physical interface (X0) on my sonicwall NSA 3600 with 4 different virtual interfaces (X0:V120, X0:V121, X0:V130, X0:V140) for the different SSID's broadcasted.

I Would like Vlan X0:v140 to only have access to a single website (pupil platform).

I've created an adress group which contains all the IP-adresses that server uses.

enter image description here

When I create an access rule to allow outgoing traffic or an access rule to block outgoing traffic there is no problem, all traffic passes or is blocked, but when I create an access rule to allow traffic to the specific ip-adresses of the pupils platform all traffic is blocked, even the website which shouldn't be.

enter image description here

Is it possible to help me out to overcome this problem?

Thanks a million!

Korneel Vanloocke

Improve this question
3
  • Are the pupil platforms accessing the sites using the IP address or are they using the DNS name of the website? Normally you would have to allow DNS and the web traffic for school web sites.
    – bluedogs
    Oct 25, 2016 at 17:08
  • Thanks for your response. Both the DNS name and the IP adress don't work. I've requested the IP adresses from the pupils platform servers to add to the adress group. Both options (DNS and IP) have been tested but do'nt seem to work.
    – kvanloocke
    Nov 7, 2016 at 11:59
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin ♦
    Aug 15, 2017 at 4:52

2 Answers 2

Reset to default
2

Check the order of the access rules from LAN -> WAN. You may find the newly created rule has been automatically put underneath the debt all rule. If so you should be able to move this up the list so it is above the deny rule.

Improve this answer
0

Try to use a Packet Capture filter and post the result in red (blocked packets) delivered to your public pupil platform!

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.