Peacecamper wrote

Hey,

 

I'm running an Omada Controller on a Proxmox machine with two Omada switches and four EAP653s. So far I have only one special VLAN for the 5G antenna for my Telekom Speedport router, the rest of the devices are all in the same main lan with no guest network, no acl rules and so on. Yet somehow I can't ping wifi devices from wired lan devices and vice versa. Wifi to wifi and lan to lan works. I can't find any setting to change this, can you help me out?

Hi @Peacecamper 

Can you share the LAN setting on your controller? Have you created any VLAN on controller? And what are the IP address of the Omada devices, Wi-Fi clients and LAN clients?

Besides, please also confirm the topology of your network, how did you connect the controller, switch and EAP. Thanks.

Hi @Peacecamper 

May I double confirm that your router only transmit the 5G VLAN traffic to the first switch, which is Switch Haus? Have you configured the VLAN1 on router as well? Could you try to check the VLAN settings on router and share to us? Besides, what if you change the port between the router and switch to profile all?

Hi @Peacecamper 

Have you checked your VLAN setting on your router/gateway? For VLAN on layer 2 switch, the different VLAN should be not able to communicate with each other. Thus you need to check the VLAN setting on router/gateway to make sure the different VLAN can be routing successfully.

You can configure the ports on switch, one port is default LAN, and the other port as VLAN 7, please connect two PCs on the ports and test whether they can communicate. If not, there might be routing issue on your router/gateway instead of the switch.

Peacecamper wrote

  @Hank21 There are no vlan settings on the router, it's a model from my service provider and rather basic. 

 

I can access the configuration page for my antenna (VLAN 7 only) from my laptop with wifi, so this shouldn't be a problem. 

 

I also realised that I apparently can access wired components from my wifi, but not the other way around. So actually the problem is just one way, wired PCs can't access WiFi devices, but vice versa works. 

Hank21 wrote

Hi @Peacecamper 

Have you checked your VLAN setting on your router/gateway? For VLAN on layer 2 switch, the different VLAN should be not able to communicate with each other. Thus you need to check the VLAN setting on router/gateway to make sure the different VLAN can be routing successfully.

 

You can configure the ports on switch, one port is default LAN, and the other port as VLAN 7, please connect two PCs on the ports and test whether they can communicate. If not, there might be routing issue on your router/gateway instead of the switch.

 

Hi @Peacecamper 

As I mentioned before, the VLAN on Layer 2 switch should not be able to communicate with each other. The devices on VLAN 1 cannot reach VLAN 7 if there is no VLAN interface on router. I am sorry that I am not familiar to the 5G antenna you mentioned, but according to the screenshots you provided, it is normal that your main LAN and VLAN 7 has been isolated. You can just make a simple test: one port on switch with main LAN, and the other as VLAN 7. Try to PING each other, if you fail to PING each other, it means that the VLAN has been configured successfully.

Hi @Peacecamper 

Can you show me the port setting of the relevant switch you connect the PC? And what is the IP address of it? And please also check the port setting connects to the EAP, and check the IP address of your IoT device. You can also have a phone to make the test. Please provide some screenshots about how you make the test.

I have just tested that the wireless only device can be reachable for the wired PC. There is no limitation on the default LAN.