166
SONICWALL SONICOS STANDARD 3.0 ADMINISTRATOR’S GUIDE
C
HAPTER
29:
Configuring Wireless Guest Services
Bypass Guest Authentication
Bypass Guest Authentication allows a TZ 50 Wireless/TZ 150 Wireless/TZ 170 Wireless running
WGS to integrate into environments already using some form of user-level authentication. This
feature automates the WGS authentication process, allowing wireless users to reach WGS resources
without requiring authentication. This feature should only be used when unrestricted WGS access is
desired, or when another device upstream of the TZ 50 Wireless/TZ 150 Wireless/TZ 170 Wireless is
enforcing authentication.
Bypass Filters for Guest Accounts
Bypass Filters for Guest Accounts disables the SonicWALL Content Filtering Service for guests.
Use this if your network is protected by content filtering somewhere between the TZ 50 Wireless/TZ
150 Wireless/TZ 170 Wireless and the Internet, or if you want to provide unrestricted internet access
to your guests. See Chapter 43, Managing SonicWALL Security Services for more information
about content filtering.
Enable Dynamic Address Translation (DAT)
One of the TZ 50 Wireless/TZ 150 Wireless/TZ 170 Wireless key features is Wireless Guest Services
(WGS), which provides spur of the moment “hotspot” access to wireless-capable guests and visitors.
For easy connectivity, WGS allows wireless users to authenticate and associate, obtain IP settings
from the TZ 50 Wireless/TZ 150 Wireless/TZ 170 Wireless DHCP services, and authenticate using
any web-browser. Without DAT, if a WGS user is not a DHCP client, but instead has static IP settings
incompatible with the TZ 50 Wireless/TZ 150 Wireless/TZ 170 Wireless WLAN network settings,
network connectivity is prevented until the user’s settings change to compatible values.
Dynamic Address Translation (DAT) is a form of Network Address Translation (NAT) that allows the
TZ 50 Wireless/TZ 150 Wireless/TZ 170 Wireless to support any IP addressing scheme for WGS
users. For example, the TZ 150 Wireless/TZ 170 Wireless WLAN interface is configured with its
default address of 172.16.31.1, and one WGS client has a static IP Address of 192.168.0.10 and a
default gateway of 192.168.0.1, while another has a static IP address of 10.1.1.10 and a gateway of
10.1.1.1, and DAT enables network communication for both of these clients.