DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

Isolating Guest network

  • istation
  • Topic Author
  • User
  • User
More
17 Dec 2016 21:15 #1 by istation
Isolating Guest network was created by istation
Current Hardware

2925 Router
G1241 Switch
P1100 POE Switch
AP910C AP connect to POE switch

All Devices have a static IP on same subnet/Lan3

SSID 2 on AP I want as guest and isolating from all other wired and wireless devices, however checking isolation box doesn't isolate from the lan only other wireless devices

What's the best way to achieve this? Should I move AP to a new subnet? Along with P1100 separating them from the main lan?

Please Log in or Create an account to join the conversation.

More
21 Dec 2016 14:55 #2 by aweaton
Replied by aweaton on topic Re: Isolating Guest network
Setup LAN #3 for the guest network with a IP address range separate from your normal users. e.g. 192.168.3.x.
Setup a vLAN and associate it with LAN #3.
vLAN tag the guest WiFi network SSID with the same tag # as LAN #3.

Exact process with vary according to your router but have a look at these for the general principle.
http://www.draytek.co.uk/support/guides/kb-wireless-guestnetwork
https://www.draytek.com/en/faq/faq-wlan/wlan.wireless-lan/how-to-separate-the-wi-fi-access-for-guests-and-employees-with-vigor3900-and-vigorap-900/

Please Log in or Create an account to join the conversation.

  • istation
  • Topic Author
  • User
  • User
More
21 Dec 2016 15:58 #3 by istation
Replied by istation on topic Re: Isolating Guest network
Do I need to tag the ports on each of the switches..? as the AP is POE and is connected to the P1100 via the eG1241 switch both on LAN3/VLAN3

I will be using LAN5/VLAN5 for guest network

https://drive.google.com/file/d/0B23h8iUhRh92TlRMd3BIcEpvc2s/view?usp=sharing

https://drive.google.com/file/d/0B23h8iUhRh92dHdEUnE5WmcxY0U/view?usp=sharing

https://drive.google.com/file/d/0B23h8iUhRh92Q0hqOXFOUnhLVms/view?usp=sharing

https://drive.google.com/file/d/0B23h8iUhRh92bzl6ZFNFVGhzWnc/view?usp=sharing

The AP currently sits on LAN3/VLAN3 for both SSID's

Please Log in or Create an account to join the conversation.

More
21 Dec 2016 17:44 #4 by aweaton
Replied by aweaton on topic Re: Isolating Guest network
No, don't tag the port on the switches otherwise all traffic from the AP will be on the wrong LAN.
Assuming the switches you have support 802.1q vLAN tagging they should pass through the guest WiFi network traffic with the vLAN tagss in tact.

Please Log in or Create an account to join the conversation.

  • istation
  • Topic Author
  • User
  • User
More
21 Dec 2016 17:57 #5 by istation
Replied by istation on topic Re: Isolating Guest network
Must be missing something then as I can still see the LAN from the guest wifi...

Please Log in or Create an account to join the conversation.