Vlans & Cisco AP - browsing computers

[tw09873]

I have a Cisco 1138AG AP directly connected to a Fortigate 80c. I have two vlans on the AP, one for employees, one for guests. On the Fortigate I have firewall policies set for the employee vlan to access the internal LAN and the internet, and the guest vlan to only access the internet. I also have a reverse policy allowing the internal LAN to access the employee vlan. Everything is working fine, however when connected to the employee vlan, I cannot view/browse the computers of the internal LAN, and vice versa. I can ping them and manually navigate to them by IP address, but they don't show up as being "broadcasted" in the windows Network. Any way to configure this (to allow employee vlan users to browse internal LAN computers through Network)?

Thanks!

 

[ADB100]

You need to read up on WINS and Microsoft networking between subnets/networks.....

Andy

 

[tw09873]

Thanks for the nudge. Got a WINS server going on my Samba box, configured the Fortigate to hand out its IP to employee vlan/subnet users through dhcp. Hit and miss if users can browse the entire workgroup, but at least they can resolve names.

Notable articles:

http://www.samba.org/samba/docs/using_samba/ch07.html

http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetworkBrowsing.html

http://whereofwecannotspeak.wordpre...a-as-a-wins-server-in-a-windows-peer-network/

http://www.cisco.com/en/US/products/ps6087/prod_configuration_examples_list.html

Thanks again!

 

[ADB100]

Yep - Hit and miss is probably a good desription.... In a typical wired environment you are supposed to keep at least two machines that are 'Browse Master' capable switched on permanently per subnet/broadcast domain. Clients will use the Browse Master to create the network browse list. In a wireless environment where hosts are more transient this is obviously a bit more tricky...
Personally I have disabled NetBIOS on my network so nobody ever sees a 'browse list' anymore. I have AD-published shares and printers and use mapped drives instead.

Some stuff here:

http://www.windowsitpro.com/article/tcpip/life-without-netbios

Good luck

Andy