topic Re: Tunnel traffic to an alternative ISP SZ100 in SmartZone and Virtual SmartZone

Tunnel traffic to an alternative ISP SZ100

jaco_heever — Tue, 15 Oct 2019 10:24:30 GMT

Hi.

Sorry for asking a question that might have been discussed on another forum but if someone can assist that will be great.

We have a client that have a SZ 100 onsite with APs connecting to the SZ trough a L3 network.

They have 2 service providers, 1 for the corp network and 1 for guest access. The corp network get offloaded from the AP to a local switch/router.

is it possible to tunnel the traffic from the AP to SZ and then either break out on the 2nd service provider or hand off to a Mikrotik router?

if yes is there anyone that can guide me trough this. been playing around with the GRE and Soft GRE tunnels but not winning

thanks

Re: Tunnel traffic to an alternative ISP SZ100

michael_brado — Tue, 15 Oct 2019 17:59:43 GMT

Yes, you should be able to tunnel your Guest Network WLAN back to the SZ controller, and VLAN it off to either ISP, versus local break out (LBO) and drop client traffic for the corp net at the AP switchports.
The SZ-100 has built in Dataplane, so just configure Tunneling under your Guest Access WLAN advanced options. We use RGE by default, no 3rd party equip required.

Re: Tunnel traffic to an alternative ISP SZ100

jaco_heever — Wed, 16 Oct 2019 04:52:55 GMT

thank michael,

Re: Tunnel traffic to an alternative ISP SZ100

jaco_heever — Sun, 01 Dec 2019 07:14:31 GMT

Can you maybe advise how to config the SZ100 physical port/vlan to hand off traffic? I could create the gre and ssid to use the gre but cant get the guest traffic to offload on second isp breakout on the sz100

Re: Tunnel traffic to an alternative ISP SZ100

robert_lowe_722 — Mon, 02 Dec 2019 15:56:43 GMT

In the WLAN go to config, then advanced and enter a VLAN other than 1 for the guest traffic. Then at the existing controller LAN switch port, make the guest VLAN a 'tagged' VLAN or a trunk allowed VLAN depending on the switch manufacturer you are using

Re: Tunnel traffic to an alternative ISP SZ100

robert_lowe_722 — Mon, 02 Dec 2019 15:57:07 GMT

Thats assuming you have already ticked the 'Tunnel this SSID to the controller' check box