Is my firewall setting preventing wireless network guest access?

Is my firewall setting preventing wireless network guest access?

Where I work we have a wireless guest network that vendors can connect to without any authentication. Most vendors using Windows XP connect without any problem, but some see the network but can't get an IP. Is this a firewall setting or what?

    Requires Free Membership to View

    By submitting your registration information to SearchNetworking.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchNetworking.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

Connecting to a wireless network but not obtaining a dynamic IP address is usually a sign of post-association failure -- for example, when a station's MAC address is blocked on the LAN or when a station cannot successfully complete the 802.1X key handshake because it has the wrong Pre-Shared Key or a bad PEAP password.

Because your wireless guest network is not using authentication -- and I assume it is also not using encryption -- then the most likely culprit is DHCP itself. Put a LAN analyzer like Wireshark between the AP and the DHCP server, and watch to see whether DHCP requests are actually making it onto the LAN. If not, try capturing wireless packets to see whether the affected station is actually generating DHCP requests. If you still see nothing, look at the configuration of the station itself -- for example, is the DHCP Client service not running or is a personal firewall blocking DHCP? Work your way back through the path until you find the culprit.

This was first published in April 2008