Suddenly my Wifi-Guest no internet after install old NGAF

Suddenly my Wifi-Guest no internet after install old NGAF. Any advise to set it back. Im using sub interface eth2:200. is it i need to create the vlan first?

Hi, May i know what ISP service your using, if using UNIFI , need to set the eth2.500 as Unifi use vlan 500 for PPoE.

Hope this help!

To resolve this, first, check if the sub-interface eth2:200 is correctly configured with the appropriate VLAN settings. If VLANs are required, ensure they are properly configured on both the sub-interface and the corresponding network infrastructure. Additionally, verify that the NGAF settings align with the network requirements for the WiFi-Guest. If necessary, reconfigure the NGAF to match the desired network parameters and ensure proper routing. Finally, confirm that there are no conflicting firewall rules or access restrictions hindering internet access for the WiFi-Guest network.

You may try these:

1. NGAF Configuration:

    NGAF model and software version: Different models and versions might have slightly different configuration procedures.
    NGAF configuration with the Wifi-Guest network: Is the guest network explicitly configured on the NGAF? How is it configured (VLAN ID, DHCP pool, firewall rules)?

2. Previous configuration:

    Did the Wifi-Guest network have internet access before installing the NGAF? This helps isolate the issue to the NGAF setup.
    How was the Wifi-Guest network configured previously? Knowing the previous setup can provide clues about missing configurations on the NGAF.

3. Sub-interface eth2:200:

    What role does this sub-interface play in the Wifi-Guest network? Is it the interface directly connected to the guest Wi-Fi access point?
    Is the sub-interface properly configured with an IP address and gateway?

Troubleshooting steps:

    Double-check the NGAF configuration for the guest network: Ensure VLAN ID, DHCP pool, and firewall rules are correctly configured.
    Verify the sub-interface eth2:200 configuration: Check IP address, gateway, and any VLAN tagging settings.
    Review NGAF logs: Logs might reveal errors related to guest network traffic or DHCP lease assignment.
    Compare current and previous configurations: Look for discrepancies between the NGAF and previous guest network setup.

VLAN creation:

Creating a VLAN might be necessary if the guest network was previously on a separate VLAN and the NGAF requires VLAN tagging for access. However, this depends on your specific network layout and configuration.

Additional resources:

    Sangfor Community Forum: The Sangfor community forum might have similar cases and solutions related to NGAF and guest network configuration.
    Sangfor NGAF documentation: Refer to the NGAF documentation for specific configuration instructions and troubleshooting tips.

I recommend sharing the requested information and following the troubleshooting steps. If the issue persists, consider consulting the Sangfor community forum or contacting Sangfor support for further assistance.

Remember, modifying network configurations can impact network stability and security. Proceed with caution and backup your existing configurations before making any changes.

Troubleshooting steps are as follows

1. Check is your interface is on correct zone
2.Check NATing
3. Create the application policy for this wifi pool for the internet
4. Also check the routing (this pool or zone exist in default routing source or not)

after doing this go to the troubleshooting tab and check where your traffic is blocking

Check the subinterface status or config. Maybe there was a change that is why you don't internet connections

It seems like you're facing connectivity issues with your Wi-Fi Guest network after installing an old NGAF (Next-Generation Firewall) and using a subinterface eth2:200.

If you are using a subinterface (eth2:200), it's likely associated with a VLAN. Check if the VLAN configuration is correct. If you haven't configured the VLAN yet, you may need to do so. Make sure that the VLAN ID on the NGAF matches the VLAN ID on your network infrastructure.

Check if the NGAF can reach the internet. You can use tools like ping or traceroute from the NGAF to test connectivity to external IP addresses.

Check NGAF logs for any errors or warnings that might provide insights into the connectivity issue. Logs can help identify specific issues and guide further troubleshooting.