Multiple SSIDs (wireless networks) with Sonicwall Sonicpoint

Question

My hardware:

SonicWALL NSA240 SonicPoint N NetGear GS748T

My goal:

BusinessPrivate SSID = Access to Business Network and Internet BusinessGuest SSID = Access to Internet

Can someone explain real slow like how to configure this hardware to achieve my goal?

Supposedly this should be cake with VLANs - but I apparently do not understand the finer concepts of vlans and cannot get this configuration to work:

https://www.fuzeqna.com/sonicwallkb/consumer/kbdetail.asp?kbid=5133

When I plug the SonicPoint into the switch, I cannot get it to appear under "SonicPoints" in the SonicWALL.

If I plug it into Port X4 on the Sonicwall, no problem, it appears, but then I cannot assign more than one zone to the port (without VLANs, which I don't understand anyway).

I can provide any information and screenshots necessary.

Answer 1

Ok, the secret was to plug the SonicPoint directly into the Sonicwall on port X4, but then to create additional VLAN interfaces under X4.

Name    Zone IP Address   Subnet Mask    IP Assignment  Status
X4      WLAN 192.168.2.1  255.255.255.0  Static         100 Mbps full-duplex 
X4:V100 WLAN 192.168.3.1  255.255.255.0  Static         VLAN Sub-Interface  
X4:V200 WLAN 192.168.4.1  255.255.255.0  Static         VLAN Sub-Interface

"WLAN" is the "Zone". You can assign different zones if necessary.

Under "SonicPoint / Virtual Access Point > Virtual Access Points":

# SSID              VLAN ID Authentication  Cipher Max Clients
1 Private Wireless  100  Both            WEP    16            
2 Guest Wireless    200  Open            None   16  

Note, if you're using WEP, the key(s) are set under "SonicPoint / SonicPoints" under the appropriate provisioning profile.

Add the Virtual Access Points to a Virtual Access Points Group, then assign that group under "Virtual Access Point Settings" in the provision profile.

Under "Firewall / Access Rules", give the private wireless access to the LAN and deny the guest wireless access to the LAN:

#  Priority  Source          Destination  Service  Action  Users
1  1         X4 Subnet       Any          Any      Allow   All            
2  2       X4:V100 Subnet  Any          Any      Allow   All              
3  3         X4:V200 Subnet  Any          Any      Deny    All

That's about all there is to it. Plenty of other configuration options to play with though, depending on your requirements.