hello, 
i am configuring second vlan for guest access internet only.
the router is 2860 and Ap is 910
in 2860: 
vlan0 192.168.1.0
vlan1 172.16.1.0   with tag 50

in AP910:
Ap adress is 192.168.1.3 and under 2.4gh setup i set :
main users ssid "no tag"
guest ssid tag 50

the wireles phone connected to AP910 seems to work fine,  
when connected to main i get 192.168.1....  and i see all lan and when conected to 172.16.1.... i see only internet.

the strange is when i enable the intervlan comunication between vlan0 and vlan1 , the phone get access from the guest  172.16.1.... lan  to the NAS with 192.168.1.7 BUT i cannot ping the phone from pc.
the pc is in the same subnet as NAS , 192.168.1.50 
why i am able to see the all the lan from the phone  BUT i cannot ping it?

i apreciate any help.
Thanks
 

Hi AchillesGr,

Is your firewall enabled, and if so, do you have any rules in-place that would block the ICMP pings?

Also, have you set the correct gateway address on your PC, which would need to be 192.168.1.1 (I’m guessing your router is 1.1 as you haven’t mentioned its IP in your post).

Does your phone (I’m guessing smart phone rather than VoIP phone) allow pings from any other devices in the same subnet, or even from the router’s ping tool?

Gateway addresses need to be correct for VLANs to work as they are vital for routing the traffic to the correct node(your router) to be forwarded on to other subnet(s); they’re kind of like the front door of a house, without a front door you can only go from room to room and not to the next house along.

On your AP, have you enabled the ‘Isolate Members’ option? As this might be blocking the pings too.


Just a couple of things to try…