Pfsense w/ Cisco SG300 & Apple Airport Extreme Guest SSID (vlan 1003) - help!

tuffcalc

Hi everyone,

I'm having trouble with my guest SSID - I can't get it to serve an IP when connecting to the guest network.

My equipment:

1. pfsense
2. Apple Airport Extreme (guest SSID setup - the vlan tag is 1003)
3. Cisco SG300

I've following these instructions to setup pfsense - http://tech.krizic.net/2013/09/apple-airport-extreme-guest-mode-with.html

I'm not too sure what to do with the SG300. I've attached screenshots of my current settings … can anyone help? I've been tearing out my hair trying to get this to work.

Thanks everyone!

![Screen Shot 2015-02-11 at 10.03.52 PM.png](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.03.52 PM.png)
![Screen Shot 2015-02-11 at 10.03.58 PM.png](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.03.58 PM.png)
![Screen Shot 2015-02-11 at 10.03.52 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.03.52 PM.png_thumb)
![Screen Shot 2015-02-11 at 10.03.58 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.03.58 PM.png_thumb)

tuffcalc

A few more settings…

![Screen Shot 2015-02-11 at 10.03.45 PM.png](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.03.45 PM.png)
![Screen Shot 2015-02-11 at 10.04.08 PM.png](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.04.08 PM.png)
![Screen Shot 2015-02-11 at 10.04.17 PM.png](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.04.17 PM.png)
![Screen Shot 2015-02-11 at 10.03.45 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.03.45 PM.png_thumb)
![Screen Shot 2015-02-11 at 10.04.08 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.04.08 PM.png_thumb)
![Screen Shot 2015-02-11 at 10.04.17 PM.png_thumb](/public/imported_attachments/1/Screen Shot 2015-02-11 at 10.04.17 PM.png_thumb)

tuffcalc

I figured it out … I didn't have the port vlan membership properly setup for the airport. Doh!

technopop

I'm doing this with an SG200 here.

For whatever reason, I can't seem to get connecting clients to be issued an IP through DHCP.

technopop

Seemingly, by turning off bogon network deny on WAN seems to have caused things to start working.

johnpoz

Blocking bogon on wan would have NOTING to do with it that is for sure!!!