Assign seperate vlan for Wifi users
When WiFi users connect through APs controlled by Sophos central, we cannot assign a separate vlan to them, and lease an IP from our existing DHCP. This is a basic network requirement as users connecting through WiFi should be treated separately and also help in monitoring malicious activities.
Your helpdesk confirmed me this feature is unavailable, even when this is a very basic feature!
Here is what they say:
8601685 - It was nice speaking with you over the phone call today. I would like to inform you that Clients connected on AP will be able to lease IP from same subnet as per working behavior of Sophos Central Wireless.
You cannot change the subnet on Sophos Central Wireless for leasing IP's to clients connected to Sophos AP. If you want to achieve this requirement, please navigate to below mentioned URL and raise a feature request for the same.
Appreciate your views and actions...
Jeff D commented
I believe this is possible. My problem is that we can't assign a VLAN to the AP itself. Have the AP use X vlan, while all clients use Y vlan.
I agree with this. We are holding off on deploying more APX devices until the feature set matures.