DrayTek UK Users' Community Forum
Help, Advice and Solutions from DrayTek Users
Isolating Guest network
- istation
- Topic Author
- Offline
- New Member
Less
More
- Posts: 3
- Thank you received: 0
17 Dec 2016 21:15 #87533
by istation
Isolating Guest network was created by istation
Current Hardware
2925 Router
G1241 Switch
P1100 POE Switch
AP910C AP connect to POE switch
All Devices have a static IP on same subnet/Lan3
SSID 2 on AP I want as guest and isolating from all other wired and wireless devices, however checking isolation box doesn't isolate from the lan only other wireless devices
What's the best way to achieve this? Should I move AP to a new subnet? Along with P1100 separating them from the main lan?
2925 Router
G1241 Switch
P1100 POE Switch
AP910C AP connect to POE switch
All Devices have a static IP on same subnet/Lan3
SSID 2 on AP I want as guest and isolating from all other wired and wireless devices, however checking isolation box doesn't isolate from the lan only other wireless devices
What's the best way to achieve this? Should I move AP to a new subnet? Along with P1100 separating them from the main lan?
Please Log in or Create an account to join the conversation.
- aweaton
- Offline
- Junior Member
Less
More
- Posts: 76
- Thank you received: 0
21 Dec 2016 14:55 #87564
by aweaton
Replied by aweaton on topic Re: Isolating Guest network
Setup LAN #3 for the guest network with a IP address range separate from your normal users. e.g. 192.168.3.x.
Setup a vLAN and associate it with LAN #3.
vLAN tag the guest WiFi network SSID with the same tag # as LAN #3.
Exact process with vary according to your router but have a look at these for the general principle.
http://www.draytek.co.uk/support/guides/kb-wireless-guestnetwork
https://www.draytek.com/en/faq/faq-wlan/wlan.wireless-lan/how-to-separate-the-wi-fi-access-for-guests-and-employees-with-vigor3900-and-vigorap-900/
Setup a vLAN and associate it with LAN #3.
vLAN tag the guest WiFi network SSID with the same tag # as LAN #3.
Exact process with vary according to your router but have a look at these for the general principle.
Please Log in or Create an account to join the conversation.
- istation
- Topic Author
- Offline
- New Member
Less
More
- Posts: 3
- Thank you received: 0
21 Dec 2016 15:58 #87565
by istation
Replied by istation on topic Re: Isolating Guest network
Do I need to tag the ports on each of the switches..? as the AP is POE and is connected to the P1100 via the eG1241 switch both on LAN3/VLAN3
I will be using LAN5/VLAN5 for guest network
https://drive.google.com/file/d/0B23h8iUhRh92TlRMd3BIcEpvc2s/view?usp=sharing
https://drive.google.com/file/d/0B23h8iUhRh92dHdEUnE5WmcxY0U/view?usp=sharing
https://drive.google.com/file/d/0B23h8iUhRh92Q0hqOXFOUnhLVms/view?usp=sharing
https://drive.google.com/file/d/0B23h8iUhRh92bzl6ZFNFVGhzWnc/view?usp=sharing
The AP currently sits on LAN3/VLAN3 for both SSID's
I will be using LAN5/VLAN5 for guest network
The AP currently sits on LAN3/VLAN3 for both SSID's
Please Log in or Create an account to join the conversation.
- aweaton
- Offline
- Junior Member
Less
More
- Posts: 76
- Thank you received: 0
21 Dec 2016 17:44 #87566
by aweaton
Replied by aweaton on topic Re: Isolating Guest network
No, don't tag the port on the switches otherwise all traffic from the AP will be on the wrong LAN.
Assuming the switches you have support 802.1q vLAN tagging they should pass through the guest WiFi network traffic with the vLAN tagss in tact.
Assuming the switches you have support 802.1q vLAN tagging they should pass through the guest WiFi network traffic with the vLAN tagss in tact.
Please Log in or Create an account to join the conversation.
- istation
- Topic Author
- Offline
- New Member
Less
More
- Posts: 3
- Thank you received: 0
21 Dec 2016 17:57 #87567
by istation
Replied by istation on topic Re: Isolating Guest network
Must be missing something then as I can still see the LAN from the guest wifi...
Please Log in or Create an account to join the conversation.
Moderators: Chris, Sami
Copyright © 2024 DrayTek