Pfsense w/ Cisco SG300 & Apple Airport Extreme Guest SSID (vlan 1003) - help!



  • Hi everyone,

    I'm having trouble with my guest SSID - I can't get it to serve an IP when connecting to the guest network.

    My equipment:

    1. pfsense
    2. Apple Airport Extreme (guest SSID setup - the vlan tag is 1003)
    3. Cisco SG300

    I've following these instructions to setup pfsense - http://tech.krizic.net/2013/09/apple-airport-extreme-guest-mode-with.html

    I'm not too sure what to do with the SG300.  I've attached screenshots of my current settings … can anyone help? I've been tearing out my hair trying to get this to work.

    Thanks everyone!

    ![Screen Shot 2015-02-11 at 10.03.52 PM.png](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.03.52 PM.png)
    ![Screen Shot 2015-02-11 at 10.03.58 PM.png](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.03.58 PM.png)
    ![Screen Shot 2015-02-11 at 10.03.52 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.03.52 PM.png_thumb)
    ![Screen Shot 2015-02-11 at 10.03.58 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.03.58 PM.png_thumb)



  • A few more settings…

    ![Screen Shot 2015-02-11 at 10.03.45 PM.png](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.03.45 PM.png)
    ![Screen Shot 2015-02-11 at 10.04.08 PM.png](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.04.08 PM.png)
    ![Screen Shot 2015-02-11 at 10.04.17 PM.png](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.04.17 PM.png)
    ![Screen Shot 2015-02-11 at 10.03.45 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.03.45 PM.png_thumb)
    ![Screen Shot 2015-02-11 at 10.04.08 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.04.08 PM.png_thumb)
    ![Screen Shot 2015-02-11 at 10.04.17 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.04.17 PM.png_thumb)



  • I figured it out … I didn't have the port vlan membership properly setup for the airport.  Doh!



  • I'm doing this with an SG200 here.

    For whatever reason, I can't seem to get connecting clients to be issued an IP through DHCP.



  • Seemingly, by turning off bogon network deny on WAN seems to have caused things to start working.


  • Rebel Alliance Global Moderator

    Blocking bogon on wan would have NOTING to do with it that is for sure!!!