topic Re: Guest access still can access internal network by using computer name in ZoneDirector

Guest access still can access internal network by using computer name

alan_tam_ell5st — Wed, 07 Nov 2018 11:38:11 GMT

Currently , I am using zd1200 with 9.13 firmware. I try to create create guest access service that allow visitor to access internet but can not browse any internal network share drive.

If visitor connect to guest network. They can still access internal network shared drive using computer name. It seem like it only block guest access internal network using ip address only.

Is there anywhere to block guest network from access internal network by using ip address or computer name?

Thanks.

Alan.

Re: Guest access still can access internal network by using computer name

DarrelRhodes — Wed, 07 Nov 2018 11:40:59 GMT

Hi Alan,

Enabling guest access alone won't isolate guest-clients from your internal network.

I would recommend separating guest-clients by using a different VLAN to your internal network.

Take a look here for further info: https://support.ruckuswireless.com/articles/000001547

I hope that helps,
Darrel.

Re: Guest access still can access internal network by using computer name

alan_tam_ell5st — Wed, 07 Nov 2018 12:12:50 GMT

Thanks for reply. If without vlan switches, will isolation setting with acl can block visitor from access internal network?

Re: Guest access still can access internal network by using computer name

DarrelRhodes — Wed, 07 Nov 2018 12:27:12 GMT

Hi Alan,

Yes it should be possible. I'd recommend tunnelling guest-user traffic back to the Zone Director and setting ACLs so guest-user traffic can only reach the default gateway and block acess to all other IPs on your private network.

Don't forget to allow for DHCP and DNS in your ACL config.

I hope that helps.
Darrel.

Re: Guest access still can access internal network by using computer name

alan_tam_ell5st — Wed, 07 Nov 2018 13:41:28 GMT

Is there any guide for tunneling guest traffic to zone director? Thank you so much for your answer

Re: Guest access still can access internal network by using computer name

DarrelRhodes — Wed, 07 Nov 2018 13:57:27 GMT

Hi Alan,

It's a single check-box in the ZD WLAN configuration. It means all traffic on that specific WLAN will centrally egress from the ZD rather than the APs in the network.

You can download ZoneDirector user guide documentation here: https://support.ruckuswireless.com/documents?filter=73#documents

Thanks,
Darrel.

Re: Guest access still can access internal network by using computer name

alan_tam_ell5st — Wed, 07 Nov 2018 14:08:23 GMT

If create guest access will l3 back option still available? Thanks

Alan

Re: Guest access still can access internal network by using computer name

DarrelRhodes — Wed, 07 Nov 2018 14:09:58 GMT

Apologies Alan I'm not familiar with that terminology - can you provide more details please?

Thanks,
Darrel.

Re: Guest access still can access internal network by using computer name

alan_tam_ell5st — Wed, 07 Nov 2018 23:29:04 GMT

Sorry for typing mistake. If create guest access will l3 acl control option still available? Thanks